last executing test programs: 6m10.520531697s ago: executing program 32 (id=10412): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x1fffffc, &(0x7f0000000180)=[{0xfffffffffffffffc, 0x2}], 0x1, 0x237, 0x0, 0x2, 0x0, 0x2}) 6m4.165971092s ago: executing program 33 (id=10598): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000)={[{@noswap}]}) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00ad, &(0x7f0000000200)={[{@noswap}, {@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}]}) 2m47.918025544s ago: executing program 5 (id=14712): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg$unix(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000000, 0x0) 2m47.909428165s ago: executing program 5 (id=14713): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="df", 0x1}], 0x1}}], 0x1, 0x24088804) sendto$inet6(r0, &(0x7f0000000100)="8c82", 0x2, 0x81, &(0x7f0000000240)={0xa, 0x0, 0x0, @private0, 0x1}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x9, 0x4, 0x9}, 0x10) 2m47.880389338s ago: executing program 5 (id=14715): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x1c, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x5}, @TCA_PIE_TUPDATE={0x8, 0x3, 0xa2}, @TCA_PIE_LIMIT={0x8, 0x2, 0xf}]}}]}, 0x48}}, 0x4000010) 2m47.815154619s ago: executing program 5 (id=14717): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f00000002c0)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') 2m47.758741375s ago: executing program 5 (id=14718): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000140), 0x0) clock_adjtime(0x0, &(0x7f0000000200)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x5a6c103, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd, 0x801, 0x0, 0x20000000000}) timerfd_settime(r0, 0x3, &(0x7f00000001c0)={{}, {0x77359400}}, 0x0) 2m47.459465301s ago: executing program 5 (id=14723): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff70) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 2m47.420009788s ago: executing program 34 (id=14723): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff70) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 2m23.573086952s ago: executing program 2 (id=15193): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) writev(r1, &(0x7f0000001980)=[{&(0x7f0000000240)="f9", 0x1}], 0x1) close_range(r0, r1, 0x0) 2m23.467469954s ago: executing program 2 (id=15194): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000680)=0x6, 0x4) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r0, &(0x7f00000000c0)="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", 0x301, 0x6000000000000000, 0x0, 0x0) 2m23.467229274s ago: executing program 2 (id=15195): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000300)={0x2, {{0x2, 0x2, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e24, @multicast1}}]}, 0x110) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x14, @multicast2}}}, 0x88) 2m23.288763497s ago: executing program 2 (id=15201): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2m23.281230642s ago: executing program 2 (id=15203): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)={0x30, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="7bf24827ed91"}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) 2m22.717091957s ago: executing program 2 (id=15216): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x7, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d588dc050391"}]}}}}}}, 0x4e) 2m22.66445667s ago: executing program 35 (id=15216): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x7, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d588dc050391"}]}}}}}}, 0x4e) 2m14.109792496s ago: executing program 4 (id=15354): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 2m13.995519017s ago: executing program 4 (id=15358): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r1, &(0x7f0000000200)=""/102400, 0x19020, 0x1000000000) 2m13.938264137s ago: executing program 4 (id=15361): r0 = socket$inet6(0xa, 0x3, 0x2) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = dup3(r1, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20) sendmmsg$inet6(r2, &(0x7f0000000600)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0xfff, @local, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=[@flowinfo={{0x14, 0x29, 0xb, 0x80000}}], 0x18}}], 0x1, 0x810) 2m13.924326762s ago: executing program 4 (id=15363): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='vegas', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendmmsg$inet(r0, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000004c0)="0e", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000005c0)="0a08e4", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000010c0)="9a", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000012c0)="7fe383", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001640)="9d73", 0x2}], 0x1}}], 0x5, 0x8080) 2m12.953801127s ago: executing program 4 (id=15374): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4000003e, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) 2m12.953338181s ago: executing program 4 (id=15375): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r2, 0x0) 2m1.153377634s ago: executing program 7 (id=15534): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}, 0xf2}], 0x1, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000180)=0x8, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 2m1.058154053s ago: executing program 7 (id=15536): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) close(0x3) socket(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000001740)=0x7ffffffd, 0x4) write$binfmt_script(r0, 0x0, 0x6f4000) 2m0.982103149s ago: executing program 7 (id=15538): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 2m0.924590226s ago: executing program 7 (id=15541): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2m0.867228561s ago: executing program 7 (id=15545): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x80}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000a0a0102"], 0x14}}, 0x0) 2m0.525723515s ago: executing program 7 (id=15550): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0x42000006, 0x801) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={r2, 0x7, 0x2}) 2m0.451015228s ago: executing program 36 (id=15550): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0x42000006, 0x801) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={r2, 0x7, 0x2}) 1m56.68050748s ago: executing program 37 (id=15375): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r2, 0x0) 1m23.013130466s ago: executing program 8 (id=16338): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount$binderfs(0x0, 0x0, 0x0, 0x4847, &(0x7f0000000100)=ANY=[@ANYBLOB='max=', @ANYRESOCT=r0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r1, &(0x7f00000029c0)=""/4096, 0x1000, 0xd36) 1m22.928698519s ago: executing program 8 (id=16341): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x29) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xff) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0xd4c, 0x8004, 0x7f, 0xc6ce, 0xfd, "00000807000000f6150000000100", 0x240000, 0x1fd}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x8) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x5) 1m22.842231166s ago: executing program 8 (id=16342): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x2) 1m22.841023461s ago: executing program 8 (id=16343): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m22.73936544s ago: executing program 8 (id=16346): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000140)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="56c78e3c733d76696e65459beb1fb664f6ce6c0c7274696f7874656e642c6163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000000)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{}, {0x20, '9p\x00'}], 0xa, "a3e5e03a7070de8de6546a722ca49e214119cd421a432e5b5a82e4c1e855ae35e7be342704b14020dfe04545"}, 0x3c) 1m22.71440301s ago: executing program 8 (id=16348): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7010fddbdf00080000000600010005000000080009000200000008000b"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 1m6.639525857s ago: executing program 38 (id=16348): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7010fddbdf00080000000600010005000000080009000200000008000b"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 43.433400494s ago: executing program 9 (id=17145): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 43.315973233s ago: executing program 9 (id=17146): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49db, 0x0, 0xfff9, 0xbfff, 0x18, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0xffffef7b, 0x0, 0xb2, 0x10, "1b09000040000080000000f678000000001000"}) r1 = syz_open_pts(r0, 0xca440) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x44) 43.315545912s ago: executing program 9 (id=17148): syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a074e0e46e35eabfb48a4cd2cd8379a97e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c40040006"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 43.265250798s ago: executing program 9 (id=17150): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r0, &(0x7f0000000240)='./file0\x00') 43.179295006s ago: executing program 9 (id=17153): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000300)={0x2, {{0x2, 0x2, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e24, @multicast1}}]}, 0x110) close(0x3) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x14, @multicast2}}}, 0x88) 42.631988341s ago: executing program 9 (id=17164): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r2, r1, 0x1c, 0x3, 0x2}) 42.482386268s ago: executing program 39 (id=17164): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r2, r1, 0x1c, 0x3, 0x2}) 4.840110988s ago: executing program 3 (id=17897): r0 = socket$inet(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3.957547884s ago: executing program 3 (id=17917): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b8001800000f23d00f21f8353000000e0f23f83e0fae8d001000000fd8e866baf80cb84a8cce8cef66bafc0cec26640f23dbc7442400b30d45d5c744240204000000c7442406000000000f011c2466baf80cb8dc759680ef66bafc0c66b8134266ef66ba4300ec0f0f49e4b70fbaa70a0000000d", 0x74}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0, 0x9}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.588633621s ago: executing program 3 (id=17923): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) readv(r0, &(0x7f0000000780)=[{&(0x7f0000000080)=""/73, 0x49}], 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 3.464805926s ago: executing program 6 (id=17925): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) preadv2(r1, &(0x7f0000000000)=[{&(0x7f0000000080), 0xffffff61}], 0x1, 0x2, 0x2, 0xc) 3.268930867s ago: executing program 0 (id=17930): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000980)={"04dfc86351907bcbc9293982262169af775bedfb0a63cb8031ecdc5351097e022d45a9640a4a4b506dc328f61ac030dacac442d82b9e81e6847961e65610b8f6e25f9eaf1a9f48ac011b67d68f8725991345a1f8ed6450a11246c6424cd7837f6bfc47209662ba0d44bce6cf7210107f57b850d0c9af06c766af1c637aa057167a6910e2e185b8d972e49eeda481d9a58394ef43958ce7407e73d6460653fc672aa4ab6a26bd1a631fa3a0f2b025ba137b8e3f933af28e1ea9984bc0438ea00b5f5b16893a22bb83ff1c92407a946d4dc7d347d526db0e71bb38f873937ca7343fb7248867adf5decd52e74f05c768c3b1c8282b9b1b1bc0f7ae08917b2abe3d3305e32b8db562d19dd7c83fde6dbe03ef72aa7ddc00144895b2a1981105046a28ca0852521afbcd560c15cd9f33e36417a251af7100392b6cdb0bbed4670d746c45fb5589f279cfd594911cb11f2a7336af10b2332e731f2eec8287c735f2346449f1629fde95d6c78bed90645bb280e222976d5721ee6dd6068cfd6174d2382e524672a2656eed5cf34eff27c2974deebf2aa6226e3fa2f15ea8db5891a062d422607a450a32cfdfaaeadfb2498e79fe9e47089b2a8bbdbdcbb076ebbd9c8fdc6246c00a34176a1c46a924ab4c3877215e5666c7b384e9238b3ad6ac559d90e22170d6915c7150a1858eb3f20a1847642018840b49c335074496991fb3193914f5213846ff8bf5b389298d797dfdd4a1d116caec17f13152c9699caab72a96d364134266030e67ada0de8d2bb05091f7d855fe1c435574856b0f8de9dc6af14ce179e3c0b6b563ccb8e02900fa9412784b0e5fa71a6e4499fecd1343d289daeb929d0cbd96f9f4501bc9d6d9d0b4f462aaf2556ce92ae6438bb3e3aa258c8c4ba6646f99f5a3d4f14f677353722cc81a8ef1f68d41ad1bef785b248faee830613461239487bee1b53724eb28301420ced16a8110a8680c91c665f8eff65e2d48f95db7ad4f30d079a39a2286fb3df3472d330f6f11fc7d1939a923c50263b3e0314037ec808df7cec279df5785fa2124d1650563799defc378cb9506ee7142eb108b3f4125ade3d9a73646bfdac795c753895b2ad51d358eff496d1c1a885c30b85b50eca89bf14ee50ae3301805f1691b3a391d7575c9a0a514710ad3e590491c60bdab122222c66cbb155452a01cb9750d14ffdc77ad11d4495c53bf38c8185c769c1449eb0b1c613eac8101d6784c9510790dd1df8fa6f2b4dbdbde3bdcbf6bfc456f68b680f2595853178e89a32e9c56d66fd2210fb0fc0e3cda61e6980e16e47ae8071182af80950c43ba221fe072e6945107a6edcd38bfeb201a657969bf340960a67e30987e56c953a177404fdf67b5d99bbc06d705a0fc9659336b458ea0d575ddfe59706738d1e65c50527200"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.020089679s ago: executing program 6 (id=17932): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x7, 0x84, 0x2, 0x5, 0x5, 0xf2, 0x0, 0x0, 0xfa, 0x2, 0x3, 0x6, 0x2, 0x2}, 0xe) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x81, 0x4) recvmmsg(r0, &(0x7f0000000840)=[{{&(0x7f0000000280)=@un=@abs, 0x80, &(0x7f0000000540)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000000200)=""/24, 0x18}, 0x6}, {{&(0x7f00000005c0)=@xdp, 0x80, &(0x7f0000000800)=[{&(0x7f0000000640)=""/60, 0x3c}, {&(0x7f0000000680)=""/110, 0x6e}, {&(0x7f0000000940)=""/97, 0x61}, {&(0x7f0000000780)=""/83, 0x53}], 0x4, &(0x7f0000001880)=""/4096, 0x1000}, 0xf8d}], 0x2, 0x140, 0x0) 3.019910277s ago: executing program 0 (id=17933): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002020000000000000000100095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r1, r3, 0x25, 0x4, @val=@iter={0x0}}, 0x20) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="662ab035e30000", 0x7}, {&(0x7f0000000100)="a9715fedead152d37599e6", 0xb}], 0x2) 2.944804177s ago: executing program 6 (id=17934): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x4010, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 1.60974612s ago: executing program 1 (id=17938): syz_io_uring_setup(0x18d, &(0x7f0000000000)={0x0, 0xb416, 0x400, 0x2, 0xc9}, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) close(0x3) 1.60956313s ago: executing program 1 (id=17939): memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb', 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c40"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1.501991835s ago: executing program 1 (id=17940): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x60840, 0x0) 1.425255334s ago: executing program 1 (id=17941): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000003c0)=@mmap={0x800000, 0x1, 0x4, 0x100004, 0x10000, {}, {0x2, 0x1, 0x0, 0x0, 0x0, 0x4, "21bb54f0"}, 0x0, 0x1, {}, 0xfffffffc}) 1.331914814s ago: executing program 1 (id=17942): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r3, 0xffffffffffffffff}) close_range(r0, r1, 0x0) poll(&(0x7f0000000380)=[{r4, 0x10}], 0x1, 0x5) 1.278090139s ago: executing program 1 (id=17943): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e402010902"], 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x10) 361.256472ms ago: executing program 3 (id=17944): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x6}, {0x0, 0xffffffff, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x6}, {{@in=@private=0xa010102, 0x4, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 261.498016ms ago: executing program 0 (id=17945): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 255.149714ms ago: executing program 0 (id=17946): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mkdir(&(0x7f0000000380)='./file7\x00', 0x0) chdir(&(0x7f0000000000)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 248.29121ms ago: executing program 6 (id=17947): open$dir(&(0x7f0000000180)='./file0\x00', 0x44040, 0x11b) close(0x4) close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 168.998849ms ago: executing program 0 (id=17948): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x1000) fanotify_mark(r1, 0x105, 0x10000839, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r1, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) 77.468891ms ago: executing program 6 (id=17949): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 72.502007ms ago: executing program 0 (id=17950): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x60, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x240008dd) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 65.311198ms ago: executing program 3 (id=17951): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0xcc9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x3, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="02017d29012918050e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e21082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c0a4c8303a0f7fbda34fb8825f80200e3c0aba61ffdfa424e37a4516e88faca"], 0xdd12}], 0x1}, 0x40) 27.008182ms ago: executing program 3 (id=17952): syz_open_dev$video(&(0x7f0000000140), 0x8, 0x230202) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x9, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="8c7f93a965", 0xfffffe47}], 0x1}}], 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) close(0x3) 0s ago: executing program 6 (id=17953): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x10009, 0x8, 0x2, 0x4000000080000e52, 0x1, 0x1, 0x1043, 0x200000000006, 0x4, 0x80, 0x1, 0x100000000, 0x800000000000001, 0x40000000008, 0x8000000000005, 0x4800040066], 0x0, 0x40110}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): iled: Read-only file system [ 504.432481][ T3958] udevd[3958]: symlink '../../loop8' '/dev/disk/by-diskseq/117.tmp-b7:8' failed: Read-only file system [ 504.447895][ T40] kauditd_printk_skb: 229 callbacks suppressed [ 504.447912][ T40] audit: type=1400 audit(1500.075:63016): avc: denied { write } for pid=9106 comm="syz.1.16318" lport=46649 faddr=::ffff:10.1.1.0 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 504.465846][ T40] audit: type=1400 audit(1500.085:63017): avc: denied { recv } for pid=5710 comm="syz-executor" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=53592 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 504.490214][ T3958] udevd[3958]: symlink '../../loop8' '/dev/disk/by-diskseq/117.tmp-b7:8' failed: Read-only file system [ 504.503416][ T40] audit: type=1400 audit(1500.122:63018): avc: denied { create } for pid=9116 comm="syz.8.16321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 504.513894][ T40] audit: type=1400 audit(1500.141:63019): avc: denied { setopt } for pid=9116 comm="syz.8.16321" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 504.536944][ T40] audit: type=1400 audit(1500.159:63020): avc: denied { name_bind } for pid=9118 comm="syz.1.16322" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 504.545459][ T40] audit: type=1400 audit(1500.159:63021): avc: denied { node_bind } for pid=9118 comm="syz.1.16322" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 504.587186][ T40] audit: type=1400 audit(1500.206:63022): avc: denied { execute } for pid=9122 comm="syz.1.16323" name="file0" dev="tmpfs" ino=21624 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 504.640495][ T40] audit: type=1400 audit(1500.253:63023): avc: denied { ioctl } for pid=9124 comm="syz.8.16324" path="socket:[157089]" dev="sockfs" ino=157089 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 504.651623][ T40] audit: type=1400 audit(1500.253:63024): avc: denied { write } for pid=9124 comm="syz.8.16324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 504.658848][ T40] audit: type=1400 audit(1500.253:63025): avc: denied { read } for pid=9124 comm="syz.8.16324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 505.310061][ T9174] netfs: Couldn't get user pages (rc=-14) [ 506.729441][ T9197] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 506.733647][ T9197] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 506.773075][ T9204] validate_nla: 1 callbacks suppressed [ 506.773090][ T9204] netlink: 'syz.1.16359': attribute type 7 has an invalid length. [ 506.779522][ T9204] netlink: 'syz.1.16359': attribute type 7 has an invalid length. [ 506.787954][ T9206] netlink: 212348 bytes leftover after parsing attributes in process `syz.9.16360'. [ 507.027093][ T9217] input: syz1 as /devices/virtual/input/input57 [ 507.151496][ T70] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 507.372344][ T5938] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 507.457258][ T70] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 507.532639][ T5938] usb 11-1: Using ep0 maxpacket: 16 [ 507.537762][ T5938] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.541670][ T5938] usb 11-1: config 0 has no interfaces? [ 507.544338][ T5938] usb 11-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 507.547725][ T5938] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.553082][ T5938] usb 11-1: config 0 descriptor?? [ 507.618825][ T70] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.622415][ T70] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.625511][ T70] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 507.630373][ T70] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 507.633367][ T70] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.637165][ T70] usb 6-1: config 0 descriptor?? [ 508.038879][ T9221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.043588][ T9221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.049215][ T9] usb 11-1: USB disconnect, device number 9 [ 508.076535][ T70] hid_parser_main: 5 callbacks suppressed [ 508.076548][ T70] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 508.083249][ T70] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 508.085685][ T70] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 508.088680][ T70] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 508.091055][ T70] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 508.093424][ T70] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 508.095848][ T70] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 508.098218][ T70] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 508.101127][ T70] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 508.103567][ T70] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 508.120658][ T70] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 508.289707][ T70] usb 6-1: USB disconnect, device number 26 [ 508.927074][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/125.tmp-b7:6' failed: Read-only file system [ 508.963697][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/125.tmp-b7:6' failed: Read-only file system [ 509.006544][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/125.tmp-b7:6' failed: Read-only file system [ 509.009630][ T9254] input: syz1 as /devices/virtual/input/input58 [ 509.098228][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/125.tmp-b7:6' failed: Read-only file system [ 509.161801][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/125.tmp-b7:6' failed: Read-only file system [ 509.203341][ T4385] udevd[4385]: symlink '../../loop6' '/dev/disk/by-diskseq/125.tmp-b7:6' failed: Read-only file system [ 509.259412][ T9277] netlink: 20 bytes leftover after parsing attributes in process `syz.6.16392'. [ 509.263017][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/125.tmp-b7:6' failed: Read-only file system [ 509.276162][ T9279] netlink: 'syz.1.16398': attribute type 1 has an invalid length. [ 509.278763][ T9279] netlink: 'syz.1.16398': attribute type 2 has an invalid length. [ 509.335102][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/125.tmp-b7:6' failed: Read-only file system [ 509.421222][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/125.tmp-b7:6' failed: Read-only file system [ 509.451465][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/125.tmp-b7:6' failed: Read-only file system [ 509.568118][ T9310] Bluetooth: hci1: expected 2178 bytes, got 2 bytes [ 509.800761][ T40] kauditd_printk_skb: 153 callbacks suppressed [ 509.800779][ T40] audit: type=1400 audit(1505.082:63179): avc: denied { accept } for pid=9315 comm="syz.6.16408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 509.874509][ T40] audit: type=1400 audit(1505.157:63180): avc: denied { read } for pid=9321 comm="syz.6.16411" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 509.881919][ T9322] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 509.884750][ T40] audit: type=1400 audit(1505.157:63181): avc: denied { open } for pid=9321 comm="syz.6.16411" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 509.894143][ T40] audit: type=1400 audit(1505.157:63182): avc: denied { ioctl } for pid=9321 comm="syz.6.16411" path="/dev/iommu" dev="devtmpfs" ino=632 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 510.230440][ T40] audit: type=1400 audit(1505.484:63183): avc: denied { map_create } for pid=9326 comm="syz.6.16415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 510.239296][ T40] audit: type=1400 audit(1505.484:63184): avc: denied { map_read map_write } for pid=9326 comm="syz.6.16415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 510.402563][ T40] audit: type=1400 audit(1505.634:63185): avc: denied { read write } for pid=9332 comm="syz.6.16418" name="vhost-vsock" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 510.410503][ T40] audit: type=1400 audit(1505.634:63186): avc: denied { open } for pid=9332 comm="syz.6.16418" path="/dev/vhost-vsock" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 510.427508][ T40] audit: type=1400 audit(1505.634:63187): avc: denied { recv } for pid=5709 comm="sshd-session" saddr=10.0.2.2 src=46986 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 510.435557][ T40] audit: type=1400 audit(1505.634:63188): avc: denied { ioctl } for pid=9332 comm="syz.6.16418" path="/dev/vhost-vsock" dev="devtmpfs" ino=1300 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 510.495767][ T9342] loop6: detected capacity change from 0 to 2640 [ 510.498018][ T9342] buffer_io_error: 11 callbacks suppressed [ 510.498051][ T9342] Buffer I/O error on dev loop6, logical block 0, async page read [ 510.502822][ T9342] Buffer I/O error on dev loop6, logical block 0, async page read [ 510.505336][ T9342] Buffer I/O error on dev loop6, logical block 0, async page read [ 510.507759][ T9342] Buffer I/O error on dev loop6, logical block 0, async page read [ 510.510148][ T9342] Buffer I/O error on dev loop6, logical block 0, async page read [ 510.512871][ T9342] Buffer I/O error on dev loop6, logical block 0, async page read [ 510.516740][ T9342] Buffer I/O error on dev loop6, logical block 0, async page read [ 510.519330][ T9342] Buffer I/O error on dev loop6, logical block 0, async page read [ 510.521855][ T9342] ldm_validate_partition_table(): Disk read failed. [ 510.523977][ T9342] Buffer I/O error on dev loop6, logical block 0, async page read [ 510.527192][ T9342] Buffer I/O error on dev loop6, logical block 0, async page read [ 510.529780][ T9342] Dev loop6: unable to read RDB block 0 [ 510.531836][ T9342] loop6: unable to read partition table [ 510.533733][ T9342] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 510.557755][ T5139] ldm_validate_partition_table(): Disk read failed. [ 510.560034][ T5139] Dev loop6: unable to read RDB block 0 [ 510.562183][ T5139] loop6: unable to read partition table [ 510.621456][ T9346] netlink: 'syz.1.16424': attribute type 29 has an invalid length. [ 510.625672][ T9346] netlink: 'syz.1.16424': attribute type 29 has an invalid length. [ 510.629189][ T9346] netlink: 596 bytes leftover after parsing attributes in process `syz.1.16424'. [ 510.781601][ T9360] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.16428'. [ 510.784793][ T9358] netlink: 'syz.6.16427': attribute type 3 has an invalid length. [ 510.815048][ T9362] netlink: 8 bytes leftover after parsing attributes in process `syz.9.16429'. [ 510.818888][ T9362] netlink: 'syz.9.16429': attribute type 21 has an invalid length. [ 511.062149][ T9372] netlink: 'syz.9.16436': attribute type 64 has an invalid length. [ 511.139423][ T9383] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16441'. [ 511.143325][ T9383] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16441'. [ 511.597801][ T9405] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 511.965426][ T9425] netlink: 240 bytes leftover after parsing attributes in process `syz.6.16458'. [ 512.257186][ T9434] loop2: detected capacity change from 0 to 7 [ 512.266877][ T9434] Dev loop2: unable to read RDB block 7 [ 512.268843][ T9434] loop2: AHDI p1 p2 p3 [ 512.270209][ T9434] loop2: partition table partially beyond EOD, truncated [ 512.272933][ T9434] loop2: p1 size 150995557 extends beyond EOD, truncated [ 512.276126][ T9434] loop2: p2 start 1702059890 is beyond EOD, truncated [ 512.545324][ T9451] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.16469'. [ 513.265584][ T9476] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16481'. [ 513.342126][ T9480] netlink: 36 bytes leftover after parsing attributes in process `syz.1.16483'. [ 513.697956][ T9494] overlayfs: failed to resolve './file2': -2 [ 513.886411][ T9510] xt_hashlimit: size too large, truncated to 1048576 [ 514.314856][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 514.366494][ T9545] sctp: [Deprecated]: syz.6.16520 (pid 9545) Use of struct sctp_assoc_value in delayed_ack socket option. [ 514.366494][ T9545] Use struct sctp_sack_info instead [ 514.427327][ T9551] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16515'. [ 514.428229][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 514.487088][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 514.533550][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 514.633173][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 514.679764][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 514.879754][ T9589] xt_hashlimit: size too large, truncated to 1048576 [ 515.063637][ T9593] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16535'. [ 515.158095][ T9599] 9pnet_virtio: no channels available for device syz [ 515.158111][ T40] kauditd_printk_skb: 203 callbacks suppressed [ 515.158126][ T40] audit: type=1400 audit(1510.098:63392): avc: denied { mounton } for pid=9598 comm="syz.1.16537" path="/4318/file0" dev="tmpfs" ino=21895 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 515.175480][ T40] audit: type=1400 audit(1510.116:63393): avc: denied { setopt } for pid=9595 comm="syz.9.16543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 515.183131][ T40] audit: type=1400 audit(1510.116:63394): avc: denied { write } for pid=9595 comm="syz.9.16543" path="socket:[158937]" dev="sockfs" ino=158937 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 515.203988][ T9602] netem: change failed [ 515.256611][ T40] audit: type=1400 audit(1510.182:63395): avc: denied { perfmon } for pid=9605 comm="syz.1.16539" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 515.279610][ T40] audit: type=1400 audit(1510.201:63396): avc: denied { prog_run } for pid=9605 comm="syz.1.16539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 515.304921][ T40] audit: type=1400 audit(1510.238:63397): avc: denied { execute } for pid=9607 comm="syz.1.16541" name="file0" dev="tmpfs" ino=21912 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 515.317863][ T40] audit: type=1400 audit(1510.238:63398): avc: denied { execute_no_trans } for pid=9607 comm="syz.1.16541" path="/4321/file0" dev="tmpfs" ino=21912 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 515.342576][ T40] audit: type=1400 audit(1510.266:63399): avc: denied { create } for pid=9609 comm="syz.9.16544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 515.350908][ T40] audit: type=1400 audit(1510.275:63400): avc: denied { create } for pid=9610 comm="syz.1.16542" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 515.361751][ T40] audit: type=1400 audit(1510.275:63401): avc: denied { connect } for pid=9609 comm="syz.9.16544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 515.569378][ T9619] netlink: 'syz.9.16553': attribute type 20 has an invalid length. [ 515.571982][ T9619] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16553'. [ 515.579712][T29331] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.579785][ T9619] netlink: 'syz.9.16553': attribute type 20 has an invalid length. [ 515.583874][T29331] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.589781][ T9619] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16553'. [ 515.590225][T29331] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.597777][T29331] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.441310][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 516.480822][ T9629] netlink: 'syz.6.16552': attribute type 29 has an invalid length. [ 516.484771][ T9629] netlink: 'syz.6.16552': attribute type 29 has an invalid length. [ 516.488642][ T9629] netlink: 508 bytes leftover after parsing attributes in process `syz.6.16552'. [ 516.539204][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 516.548410][ T9636] input: syz1 as /devices/virtual/input/input59 [ 516.637634][ T9639] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 516.650797][ T9641] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 516.657033][ T4385] udevd[4385]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 516.723749][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 518.423802][ T9749] syzkaller1: entered promiscuous mode [ 518.426138][ T9749] syzkaller1: entered allmulticast mode [ 518.457331][ T9746] netlink: 56 bytes leftover after parsing attributes in process `syz.9.16602'. [ 518.646742][ T9766] netlink: 220 bytes leftover after parsing attributes in process `syz.9.16612'. [ 518.649774][ T9766] netlink: 'syz.9.16612': attribute type 2 has an invalid length. [ 519.668896][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 519.689090][ T9814] fuse: Bad value for 'fd' [ 519.846690][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 520.022495][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 520.149100][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 520.700033][ T40] kauditd_printk_skb: 141 callbacks suppressed [ 520.700050][ T40] audit: type=1400 audit(1515.282:63543): avc: denied { create } for pid=9836 comm="syz.1.16638" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 520.756171][ T40] audit: type=1400 audit(1515.338:63544): avc: denied { allowed } for pid=9838 comm="syz.1.16639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 520.882797][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 520.892530][ T40] audit: type=1400 audit(1515.469:63545): avc: denied { read } for pid=9842 comm="syz.6.16641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 520.924696][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 520.928488][ T40] audit: type=1400 audit(1515.469:63546): avc: denied { ioctl } for pid=9842 comm="syz.6.16641" path="socket:[160300]" dev="sockfs" ino=160300 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 520.945277][ T40] audit: type=1400 audit(1515.507:63547): avc: denied { prog_load } for pid=9845 comm="syz.6.16642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 520.953473][ T40] audit: type=1400 audit(1515.507:63548): avc: denied { bpf } for pid=9845 comm="syz.6.16642" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 520.963224][ T40] audit: type=1400 audit(1515.507:63549): avc: denied { perfmon } for pid=9845 comm="syz.6.16642" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 520.972687][ T40] audit: type=1400 audit(1515.516:63550): avc: denied { prog_run } for pid=9845 comm="syz.6.16642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 521.067881][ T4385] udevd[4385]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 521.071568][ T40] audit: type=1400 audit(1515.628:63551): avc: denied { create } for pid=9847 comm="syz.1.16644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 521.071620][ T40] audit: type=1400 audit(1515.628:63552): avc: denied { bind } for pid=9847 comm="syz.1.16644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 521.278832][ T9860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16648'. [ 521.306682][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 521.462645][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 521.490386][ T9871] netlink: 8 bytes leftover after parsing attributes in process `syz.9.16652'. [ 521.501455][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 521.501766][ T9871] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 521.527512][ T8034] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 521.536639][ T8034] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 521.543192][ T8034] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 521.553193][ T8034] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 521.561424][ T8034] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 521.973924][ T9874] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.976224][ T9874] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.978552][ T9874] bridge_slave_0: entered allmulticast mode [ 521.981993][ T9874] bridge_slave_0: entered promiscuous mode [ 521.985711][ T9874] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.988184][ T9874] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.990901][ T9874] bridge_slave_1: entered allmulticast mode [ 521.993965][ T9874] bridge_slave_1: entered promiscuous mode [ 522.010815][ T9874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.015643][ T9874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.031491][ T9874] team0: Port device team_slave_0 added [ 522.036268][ T9874] team0: Port device team_slave_1 added [ 522.049930][ T9874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.052223][ T9874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.060737][ T9874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.065690][ T9874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.068474][ T9874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.080728][ T9874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.116150][ T9874] hsr_slave_0: entered promiscuous mode [ 522.118832][ T9874] hsr_slave_1: entered promiscuous mode [ 522.121647][ T9874] debugfs: 'hsr0' already exists in 'hsr' [ 522.123804][ T9874] Cannot create hsr debugfs directory [ 523.372815][ T9874] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 523.379948][ T9874] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 523.386593][ T9874] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 523.395263][ T9874] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 523.403629][ T9874] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 523.417683][ T9874] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 523.430430][ T9874] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 523.439860][ T9874] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 523.535166][ T9874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.543602][ T9874] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.549217][T29333] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.552333][T29333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.597080][T29333] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.600283][T29333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.796240][ T5938] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 523.817726][ T8017] Bluetooth: hci2: command tx timeout [ 523.931091][ T9874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 523.963712][ T9874] veth0_vlan: entered promiscuous mode [ 523.980571][ T5938] usb 11-1: Using ep0 maxpacket: 8 [ 523.980892][ T9874] veth1_vlan: entered promiscuous mode [ 523.983873][ T5938] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 523.997294][ T5938] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 524.001874][ T5938] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 524.005393][ T5938] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 524.009279][ T5938] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 524.015137][ T9874] veth0_macvtap: entered promiscuous mode [ 524.016707][ T5938] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 524.020609][ T5938] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.024973][ T9874] veth1_macvtap: entered promiscuous mode [ 524.034144][ T9874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 524.042168][ T9874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 524.049914][T29333] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.056380][T29333] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.079354][T29333] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.088886][T29333] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.147896][ T162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.160775][ T162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.235515][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.238742][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.262431][ T5938] usb 11-1: usb_control_msg returned -32 [ 524.265097][ T5938] usbtmc 11-1:16.0: can't read capabilities [ 524.368776][T10112] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.16651'. [ 524.667289][ T1163] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 524.675814][T10137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16725'. [ 524.867562][T10149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16730'. [ 524.870760][T10149] netlink: 'syz.3.16730': attribute type 30 has an invalid length. [ 524.900171][T29333] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.900194][T10149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16730'. [ 524.900216][T10149] netlink: 'syz.3.16730': attribute type 30 has an invalid length. [ 524.903984][T29333] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.904027][T29333] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.940753][T29333] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.110943][ T6084] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 525.157199][T10159] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 525.292306][ T6084] usb 6-1: Using ep0 maxpacket: 16 [ 525.297716][ T6084] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 525.301581][ T6084] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 525.306872][ T6084] usb 6-1: config 0 interface 0 has no altsetting 0 [ 525.309247][ T6084] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 525.312310][ T6084] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.319661][ T6084] usb 6-1: config 0 descriptor?? [ 525.352079][T10172] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.16739'. [ 525.356165][T10172] netlink: Unknown conntrack attr (0) [ 525.770405][ T6084] hid_parser_main: 5 callbacks suppressed [ 525.770421][ T6084] nzxt-smart2 0003:1E71:2009.000F: unknown main item tag 0x0 [ 525.775425][ T6084] nzxt-smart2 0003:1E71:2009.000F: unknown main item tag 0x0 [ 525.778365][ T6084] nzxt-smart2 0003:1E71:2009.000F: unknown main item tag 0x0 [ 525.780948][ T6084] nzxt-smart2 0003:1E71:2009.000F: unknown main item tag 0x0 [ 525.783300][ T6084] nzxt-smart2 0003:1E71:2009.000F: unknown main item tag 0x0 [ 525.789102][ T6084] nzxt-smart2 0003:1E71:2009.000F: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 526.040330][ T8017] Bluetooth: hci2: command tx timeout [ 526.119858][ T7359] usb 6-1: USB disconnect, device number 27 [ 526.274626][ T40] kauditd_printk_skb: 403 callbacks suppressed [ 526.274638][ T40] audit: type=1400 audit(1520.494:63956): avc: denied { create } for pid=10200 comm="syz.9.16748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 526.284364][ T40] audit: type=1400 audit(1520.504:63957): avc: denied { bind } for pid=10200 comm="syz.9.16748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 526.291112][ T40] audit: type=1400 audit(1520.504:63958): avc: denied { setopt } for pid=10200 comm="syz.9.16748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 526.297863][ T40] audit: type=1400 audit(1520.504:63959): avc: denied { accept } for pid=10200 comm="syz.9.16748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 526.306421][ T40] audit: type=1400 audit(1520.504:63960): avc: denied { write } for pid=10200 comm="syz.9.16748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 526.314568][ T40] audit: type=1400 audit(1520.504:63961): avc: denied { read } for pid=10200 comm="syz.9.16748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 526.322650][ T40] audit: type=1400 audit(1520.532:63962): avc: denied { mount } for pid=10202 comm="syz.9.16749" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 526.394297][ T40] audit: type=1400 audit(1520.616:63963): avc: denied { map_create } for pid=10206 comm="syz.9.16751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 526.402155][ T40] audit: type=1400 audit(1520.616:63964): avc: denied { create } for pid=10206 comm="syz.9.16751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 526.413098][ T40] audit: type=1400 audit(1520.616:63965): avc: denied { bind } for pid=10206 comm="syz.9.16751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 526.754910][ T7359] usb 11-1: USB disconnect, device number 10 [ 526.823189][T10216] input: syz0 as /devices/virtual/input/input60 [ 526.825311][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 526.831231][T10216] input: failed to attach handler leds to device input60, error: -6 [ 526.929406][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 527.023526][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 527.063255][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 527.562267][T10242] fuse: Bad value for 'fd' [ 528.004517][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 528.077242][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 528.141817][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 528.196909][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 528.251529][T10266] kvm: kvm [10265]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 528.255117][T10266] kvm: kvm [10265]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 528.275569][ T8017] Bluetooth: hci2: command tx timeout [ 528.504492][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 528.604055][T10278] fuse: Bad value for 'fd' [ 528.671335][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 528.852404][T10292] netlink: 'syz.6.16789': attribute type 22 has an invalid length. [ 528.855565][T10292] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16789'. [ 528.869833][ T12] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.869954][T10292] netlink: 'syz.6.16789': attribute type 22 has an invalid length. [ 528.877074][T10292] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16789'. [ 528.880601][ T12] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.893793][ T12] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.899879][ T12] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.156449][T10194] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 529.437841][T10331] netlink: 48 bytes leftover after parsing attributes in process `syz.9.16807'. [ 529.694702][T10352] input: syz1 as /devices/virtual/input/input61 [ 529.776193][T10357] netlink: 'syz.9.16818': attribute type 7 has an invalid length. [ 529.779994][T10357] netlink: 'syz.9.16818': attribute type 7 has an invalid length. [ 529.918677][T10365] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16822'. [ 529.927905][T10365] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16822'. [ 529.932714][T10365] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16822'. [ 530.069056][T10379] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16828'. [ 530.073756][T10379] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16828'. [ 530.078356][T10379] netlink: 'syz.6.16828': attribute type 20 has an invalid length. [ 530.156918][T10379] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16828'. [ 530.165114][T10379] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16828'. [ 530.168578][T10379] netlink: 'syz.6.16828': attribute type 20 has an invalid length. [ 530.265041][T10389] loop2: detected capacity change from 0 to 7 [ 530.269307][T10389] Dev loop2: unable to read RDB block 7 [ 530.271791][T10389] loop2: unable to read partition table [ 530.277662][T10389] loop2: partition table beyond EOD, truncated [ 530.282625][T10389] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 530.485931][ T8017] Bluetooth: hci2: command tx timeout [ 530.780592][T10426] fuse: Bad value for 'fd' [ 531.689277][ T40] kauditd_printk_skb: 157 callbacks suppressed [ 531.689289][ T40] audit: type=1400 audit(1525.566:64123): avc: denied { create } for pid=10454 comm="syz.6.16859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 531.704478][ T40] audit: type=1400 audit(1525.566:64124): avc: denied { setopt } for pid=10454 comm="syz.6.16859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 531.720345][ T40] audit: type=1400 audit(1525.566:64125): avc: denied { ioctl } for pid=10454 comm="syz.6.16859" path="socket:[163321]" dev="sockfs" ino=163321 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 531.732942][ T40] audit: type=1400 audit(1525.566:64126): avc: denied { write } for pid=10454 comm="syz.6.16859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 531.746673][ T40] audit: type=1400 audit(1525.566:64127): avc: denied { read } for pid=10454 comm="syz.6.16859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 531.752625][ T40] audit: type=1400 audit(1525.622:64128): avc: denied { create } for pid=10457 comm="syz.9.16861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 531.768352][ T40] audit: type=1400 audit(1525.651:64129): avc: denied { connect } for pid=10457 comm="syz.9.16861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 531.777258][ T40] audit: type=1400 audit(1525.651:64130): avc: denied { write } for pid=10457 comm="syz.9.16861" path="socket:[163326]" dev="sockfs" ino=163326 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 531.849097][ T40] audit: type=1400 audit(1525.716:64131): avc: denied { execute } for pid=10459 comm="syz.1.16863" name="file1" dev="tmpfs" ino=22342 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 531.915493][ T40] audit: type=1400 audit(1525.772:64132): avc: denied { module_request } for pid=10464 comm="syz.9.16864" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 532.012696][T10471] input: syz1 as /devices/virtual/input/input62 [ 532.198415][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 532.261168][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 532.361023][T10488] SELinux: failed to load policy [ 532.407750][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 532.411205][T10496] netlink: 28 bytes leftover after parsing attributes in process `syz.6.16877'. [ 533.383932][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 533.482125][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 533.487197][T10522] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16887'. [ 533.490867][T10522] netlink: 'syz.6.16887': attribute type 6 has an invalid length. [ 533.493587][T10522] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16887'. [ 533.554735][T10522] netlink: 'syz.6.16887': attribute type 6 has an invalid length. [ 533.675491][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 533.848933][T10549] netlink: 'syz.9.16899': attribute type 9 has an invalid length. [ 534.597361][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 534.652834][T10596] bad cache= option: none 399 [ 534.652834][T10596] nr_mlock 0 [ 534.652834][T10596] nr_zspages 456 [ 534.652834][T10596] nr_free_cma 0 [ 534.652834][T10596] numa_hit 4068009 [ 534.652834][T10596] numa_miss 368536 [ 534.652834][T10596] numa_foreign 368536 [ 534.652834][T10596] numa_interleave 9347 [ 534.652834][T10596] numa_local 4058468 [ 534.652834][T10596] numa_other 378077 [ 534.652834][T10596] nr_inactive_anon 27704 [ 534.652834][T10596] nr_active_anon 25244 [ 534.652834][T10596] nr_inactive_file 23410 [ 534.652834][T10596] nr_active_file 4921 [ 534.652834][T10596] nr_unevictable 1768 [ 534.652834][T10596] nr_slab_reclaimable 8827 [ 534.652834][T10596] nr_slab_unreclaimable 92501 [ 534.652834][T10596] nr_isolated_anon 0 [ 534.652834][T10596] nr_isolated_file 0 [ 534.652834][T10596] workingset_nodes 137 [ 534.652834][T10596] workingset_refault_anon 7430 [ 534.652834][T10596] workingset_refault_file 323 [ 534.652834][T10596] workingset_activate_anon 4073 [ 534.652834][T10596] workingset_activate_file 314 [ 534.652834][T10596] workingset_restore_anon 0 [ 534.652834][T10596] workingset_restore_file 0 [ 534.652834][T10596] workingset_nodereclaim 0 [ 534.652834][T10596] nr_anon_pages 8255 [ 534.652834][T10596] nr_mapped 30154 [ 534.652834][T10596] nr_file_pages 74772 [ 534.652834][T10596] nr_dirty 399 [ 534.652834][T10596] nr_writeback 0 [ 534.652834][T10596] nr_shmem 46441 [ 534.652834][T10596] nr_shmem_hugepages 0 [ 534.652834][T10596] nr_shmem_pmdmapped 0 [ 534.652834][T10596] nr_file_hugepages 0 [ 534.652834][T10596] nr_file_pmdmapped 0 [ 534.652834][T10596] nr_anon_transparent_hugepages 0 [ 534.652834][T10596] nr_vmscan_write 33831 [ 534.652834][T10596] nr_vmscan_immediate_reclaim 3515 [ 534.652834][T10596] nr_dirtied 56605 [ 534.652834][T10596] nr_written 56211 [ 534.652834][T10596] nr_throttled_written 0 [ 534.652834][T10596] nr_kernel_misc_reclaimable 0 [ 534.652834][T10596] nr_foll_pin_acquired 52676 [ 534.653120][T10596] CIFS: VFS: bad cache= option: none 399 [ 534.653120][T10596] nr_mlock 0 [ 534.653120][T10596] nr_zspages 456 [ 534.653120][T10596] nr_free_cma 0 [ 534.653120][T10596] numa_hit 4068009 [ 534.653120][T10596] numa_miss 368536 [ 534.653120][T10596] numa_foreign 368536 [ 534.653120][T10596] numa_interleave 9347 [ 534.653120][T10596] numa_local 4058468 [ 534.653120][T10596] numa_other 378077 [ 534.653120][T10596] nr_inactive_anon 27704 [ 534.653120][T10596] nr_active_anon 25244 [ 534.653120][T10596] nr_inactive_file 23410 [ 534.653120][T10596] nr_active_file 4921 [ 534.653120][T10596] nr_unevictable 1768 [ 534.653120][T10596] nr_slab_reclaimable 8827 [ 534.653120][T10596] nr_slab_unreclaimable 92501 [ 534.653120][T10596] nr_isolated_anon 0 [ 534.653120][T10596] nr_isolated_file 0 [ 534.653120][T10596] workingset_nodes 137 [ 534.653120][T10596] workingset_refault_anon 7430 [ 534.653120][T10596] workingset_refault_file 323 [ 534.653120][T10596] workingset_activate_anon 4073 [ 534.653120][T10596] workingset_activate_file 314 [ 534.653120][T10596] workingset_restore_anon 0 [ 534.653120][T10596] workingset_restore_file 0 [ 534.653120][T10596] workingset_nodereclaim 0 [ 534.653120][T10596] nr_anon_pages 8255 [ 534.653120][T10596] nr_mapped 30154 [ 534.653120][T10596] nr_file_pages 74772 [ 534.653120][T10596] nr_dirty 399 [ 534.653120][T10596] nr_writeback 0 [ 534.653120][T10596] nr_shmem 46441 [ 534.653120][T10596] nr_shmem_hugepages 0 [ 534.653120][T10596] nr_shmem_pmdmapped 0 [ 534.653120][T10596] nr_file_hugepages 0 [ 534.653120][T10596] nr_file_pmdmapped 0 [ 534.653120][T10596] nr_anon_transparent_hugepages 0 [ 534.653120][T10596] nr_vmscan_write 33831 [ 534.653120][T10596] nr_vmscan_immediate_reclaim 3515 [ 534.653120][T10596] nr_dirtied 56605 [ 534.653120][T10596] nr_written 56211 [ 534.653120][T10596] nr_throttled_written 0 [ 534.653120][T10596] nr_kernel_misc_reclaimable 0 [ 534.653120][T10596] nr_foll_pin_acquired 52676 [ 534.678586][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 534.896064][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 534.980686][ T7359] libceph: connect (1)[c::]:6789 error -13 [ 534.986573][ T7359] libceph: mon0 (1)[c::]:6789 connect error [ 534.998934][ T7359] libceph: connect (1)[c::]:6789 error -13 [ 535.001180][ T7359] libceph: mon0 (1)[c::]:6789 connect error [ 535.071442][T10606] ceph: No mds server is up or the cluster is laggy [ 535.660652][T10656] __nla_validate_parse: 5 callbacks suppressed [ 535.660663][T10656] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16944'. [ 535.740732][T10660] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16944'. [ 535.742743][ T4385] udevd[4385]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 535.743810][T10660] nbd: device at index 64 is going down [ 535.904110][T10659] netlink: 348 bytes leftover after parsing attributes in process `syz.9.16945'. [ 536.018622][T10685] ip6gre1: entered promiscuous mode [ 536.021049][T10685] ip6gre1: entered allmulticast mode [ 536.175771][ T5921] [drm:virtio_gpu_dequeue_ctrl_func] *ERROR* response 0x1205 (command 0x105) [ 536.305311][T10709] SELinux: failed to load policy [ 537.319922][ T40] kauditd_printk_skb: 185 callbacks suppressed [ 537.319940][ T40] audit: type=1400 audit(1530.835:64318): avc: denied { relabelfrom } for pid=10763 comm="syz.3.16990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 537.331091][ T40] audit: type=1400 audit(1530.835:64319): avc: denied { relabelto } for pid=10763 comm="syz.3.16990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 537.537697][ T40] audit: type=1400 audit(1531.031:64320): avc: denied { mounton } for pid=10765 comm="syz.3.16991" path="/73/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 537.557029][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 537.559916][ T40] audit: type=1400 audit(1531.059:64321): avc: denied { map } for pid=10767 comm="syz.6.16992" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 537.573343][ T40] audit: type=1400 audit(1531.069:64322): avc: denied { recv } for pid=3958 comm="udevd" saddr=127.0.0.1 src=53592 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 537.585317][ T40] audit: type=1400 audit(1531.078:64323): avc: denied { unmount } for pid=9874 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 537.595936][ T40] audit: type=1400 audit(1531.097:64324): avc: denied { unmount } for pid=9874 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 537.630304][ T40] audit: type=1400 audit(1531.125:64325): avc: denied { execute } for pid=10769 comm="syz.3.16993" name="file2" dev="tmpfs" ino=443 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 537.639578][ T40] audit: type=1400 audit(1531.125:64326): avc: denied { execute_no_trans } for pid=10769 comm="syz.3.16993" path="/74/file2" dev="tmpfs" ino=443 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 537.663483][ T40] audit: type=1400 audit(1531.153:64327): avc: denied { perfmon } for pid=10771 comm="syz.9.16994" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 537.732636][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 538.706873][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 538.768558][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 538.831325][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 538.896615][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 538.932476][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 539.105498][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 539.151205][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 539.434208][T10849] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3979591798 (509387750144 ns) > initial count (364801339648 ns). Using initial count to start timer. [ 539.685175][T10866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17033'. [ 539.746304][T10870] fuse: Bad value for 'fd' [ 540.100902][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 540.701011][T10904] kvm: user requested TSC rate below hardware speed [ 540.979609][T10926] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.17060'. [ 541.082017][T10937] netlink: 'syz.1.17065': attribute type 1 has an invalid length. [ 541.109621][T10937] 8021q: adding VLAN 0 to HW filter on device bond6 [ 541.130148][T10937] bond6: (slave geneve4): making interface the new active one [ 541.134901][T10937] bond6: (slave geneve4): Enslaving as an active interface with an up link [ 541.138594][T29333] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.143611][T29333] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.149203][T29333] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.152956][T29333] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.427175][ T8017] Bluetooth: hci0: Unknown advertising packet type: 0x76 [ 541.427223][ T8017] Bluetooth: hci0: adv larger than maximum supported [ 541.427450][T10960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 541.430438][ T8017] Bluetooth: hci0: Malformed LE Event: 0x0d [ 541.453909][T10964] binder: 10963:10964 ioctl c0306201 2000000001c0 returned -14 [ 542.017384][T10977] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 542.180206][T10985] netlink: 8 bytes leftover after parsing attributes in process `syz.9.17085'. [ 542.183703][T10985] netlink: 12 bytes leftover after parsing attributes in process `syz.9.17085'. [ 542.263796][T10985] netlink: 8 bytes leftover after parsing attributes in process `syz.9.17085'. [ 542.267498][T10985] netlink: 12 bytes leftover after parsing attributes in process `syz.9.17085'. [ 542.327987][T10991] overlayfs: upper fs does not support file handles, falling back to index=off. [ 542.672000][ T40] kauditd_printk_skb: 192 callbacks suppressed [ 542.672012][ T40] audit: type=1400 audit(1535.841:64520): avc: denied { remount } for pid=11011 comm="syz.1.17096" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 542.724232][ T40] audit: type=1400 audit(1535.898:64521): avc: denied { mount } for pid=11017 comm="syz.9.17099" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 542.816482][ T40] audit: type=1400 audit(1535.972:64522): avc: denied { create } for pid=11028 comm="syz.9.17104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 542.825723][ T40] audit: type=1400 audit(1535.991:64523): avc: denied { create } for pid=11028 comm="syz.9.17104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 542.845748][ T40] audit: type=1400 audit(1536.001:64524): avc: denied { connect } for pid=11028 comm="syz.9.17104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 542.896512][ T40] audit: type=1400 audit(1536.057:64525): avc: denied { create } for pid=11035 comm="syz.9.17108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 542.913991][ T40] audit: type=1400 audit(1536.066:64526): avc: denied { write } for pid=11035 comm="syz.9.17108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 542.923677][ T40] audit: type=1400 audit(1536.066:64527): avc: denied { connect } for pid=11035 comm="syz.9.17108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 542.933525][ T40] audit: type=1400 audit(1536.066:64528): avc: denied { name_connect } for pid=11035 comm="syz.9.17108" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 542.956173][ T40] audit: type=1400 audit(1536.103:64529): avc: denied { append } for pid=11039 comm="syz.3.17109" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 542.960460][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 543.041560][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 543.096216][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 543.177595][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 543.323362][T11067] blk_print_req_error: 10 callbacks suppressed [ 543.323375][T11067] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 543.328388][T11067] buffer_io_error: 32 callbacks suppressed [ 543.328397][T11067] Buffer I/O error on dev nbd3, logical block 0, async page read [ 543.334134][T11067] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 543.337009][T11067] Buffer I/O error on dev nbd3, logical block 1, async page read [ 543.339841][T11067] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 543.346141][T11067] Buffer I/O error on dev nbd3, logical block 2, async page read [ 543.349533][T11067] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 543.354413][T11067] Buffer I/O error on dev nbd3, logical block 3, async page read [ 543.357474][T11067] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 543.360967][T11067] Buffer I/O error on dev nbd3, logical block 0, async page read [ 543.371859][T11067] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 543.377977][T11067] Buffer I/O error on dev nbd3, logical block 1, async page read [ 543.380744][T11067] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 543.384712][T11067] Buffer I/O error on dev nbd3, logical block 2, async page read [ 543.388079][T11067] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 543.391064][T11067] Buffer I/O error on dev nbd3, logical block 3, async page read [ 543.393888][T11067] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 543.402868][T11067] Buffer I/O error on dev nbd3, logical block 0, async page read [ 543.408309][T11067] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 543.411626][T11067] Buffer I/O error on dev nbd3, logical block 1, async page read [ 543.416556][T11067] ldm_validate_partition_table(): Disk read failed. [ 543.420079][T11067] Dev nbd3: unable to read RDB block 0 [ 543.423758][T11067] nbd3: unable to read partition table [ 544.115262][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 544.382220][T11106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17135'. [ 544.424317][T11110] netlink: 'syz.9.17137': attribute type 3 has an invalid length. [ 544.429503][T11110] netlink: 'syz.9.17137': attribute type 1 has an invalid length. [ 544.433665][T11110] netlink: 196 bytes leftover after parsing attributes in process `syz.9.17137'. [ 544.441238][T11110] NCSI netlink: No device for ifindex 2147483648 [ 544.470212][T11114] syzkaller1: entered promiscuous mode [ 544.472422][T11114] syzkaller1: entered allmulticast mode [ 544.732894][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 544.744534][T11135] netlink: 212348 bytes leftover after parsing attributes in process `syz.9.17148'. [ 544.777944][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 544.831068][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 544.833229][T11142] netlink: 27 bytes leftover after parsing attributes in process `syz.6.17152'. [ 544.892506][ T4385] udevd[4385]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 544.988169][T11150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17156'. [ 545.023832][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 545.688720][ T8034] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 545.700031][ T8034] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 545.704530][ T8034] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 545.713517][ T8034] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 545.717075][ T8034] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 546.141431][T11172] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.144330][T11172] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.150584][T11172] bridge_slave_0: entered allmulticast mode [ 546.157248][T11172] bridge_slave_0: entered promiscuous mode [ 546.162888][T11172] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.165132][T11172] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.167483][T11172] bridge_slave_1: entered allmulticast mode [ 546.170270][T11172] bridge_slave_1: entered promiscuous mode [ 546.227244][T11172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.236086][T11172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.271361][T11172] team0: Port device team_slave_0 added [ 546.274488][T11172] team0: Port device team_slave_1 added [ 546.290342][T11172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.293363][T11172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.301289][T11172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.305554][T11172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.307661][T11172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.315861][T11172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.339398][T11172] hsr_slave_0: entered promiscuous mode [ 546.341585][T11172] hsr_slave_1: entered promiscuous mode [ 546.343782][T11172] debugfs: 'hsr0' already exists in 'hsr' [ 546.345608][T11172] Cannot create hsr debugfs directory [ 546.536228][ T5921] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 546.696445][ T5921] usb 6-1: Using ep0 maxpacket: 8 [ 546.700418][ T5921] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.704976][ T5921] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.709695][ T5921] usb 6-1: config 0 interface 0 has no altsetting 0 [ 546.712335][ T5921] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 546.716111][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.726699][ T5921] usb 6-1: config 0 descriptor?? [ 546.978012][T11242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17180'. [ 547.168845][ T5921] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 547.177278][ T5921] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 547.179645][ T5921] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 547.181873][ T5921] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 547.184817][ T5921] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 547.191103][ T5921] mcp2221 0003:04D8:00DD.0010: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 547.385776][T11172] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 547.395557][ T7403] usb 6-1: USB disconnect, device number 28 [ 547.395878][T11172] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 547.401584][T11172] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 547.426678][T11172] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 547.435341][T11172] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 547.445621][T11172] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 547.456496][T11172] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 547.464418][T11172] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 547.545657][T11172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.558097][T11172] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.563664][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.566816][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.584126][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.587225][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.926450][ T8034] Bluetooth: hci4: command tx timeout [ 547.973847][T11172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.024789][ T40] kauditd_printk_skb: 270 callbacks suppressed [ 548.024802][ T40] audit: type=1400 audit(1540.857:64800): avc: denied { sendto } for pid=29333 comm="kworker/u32:12" daddr=ff02::1:ff00:1b scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 548.039461][T11172] veth0_vlan: entered promiscuous mode [ 548.049925][ T40] audit: type=1400 audit(1540.867:64801): avc: denied { recv } for pid=11325 comm="syz.6.17197" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=53592 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 548.056137][T11172] veth1_vlan: entered promiscuous mode [ 548.064802][ T40] audit: type=1326 audit(1540.876:64802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11327 comm="syz.1.17198" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f918339cdd9 code=0x0 [ 548.076948][ T40] audit: type=1400 audit(1540.904:64803): avc: denied { egress } for pid=84 comm="kworker/u32:4" daddr=ff02::1:ff00:1c scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 548.088140][ T40] audit: type=1400 audit(1540.904:64804): avc: denied { search } for pid=11330 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 548.102855][T11172] veth0_macvtap: entered promiscuous mode [ 548.106972][ T40] audit: type=1400 audit(1540.904:64805): avc: denied { search } for pid=11330 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 548.110991][T11172] veth1_macvtap: entered promiscuous mode [ 548.128329][ T40] audit: type=1400 audit(1540.904:64806): avc: denied { search } for pid=11330 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 548.131205][T11172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.139322][ T40] audit: type=1400 audit(1540.904:64807): avc: denied { search } for pid=11330 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 548.144748][T11172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.157779][ T1163] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.160406][ T40] audit: type=1400 audit(1540.904:64808): avc: denied { read } for pid=11331 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 548.163998][ T1163] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.171200][ T40] audit: type=1400 audit(1540.904:64809): avc: denied { read open } for pid=11331 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 548.175607][ T1163] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.200741][ T1163] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.308457][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.312386][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.376460][ T1264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.379014][ T1264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.488278][T11354] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 548.563702][T11354] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 548.570061][T11354] overlayfs: failed to look up (tracing) for ino (-66) [ 548.952233][T11370] __nla_validate_parse: 3 callbacks suppressed [ 548.952245][T11370] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.17205'. [ 548.985114][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 549.000589][T28347] libceph: connect (1)[c::]:6789 error -13 [ 549.002564][T28347] libceph: mon0 (1)[c::]:6789 connect error [ 549.008919][T28347] libceph: connect (1)[c::]:6789 error -13 [ 549.011728][T28347] libceph: mon0 (1)[c::]:6789 connect error [ 549.103493][T11373] ceph: No mds server is up or the cluster is laggy [ 549.154600][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 549.203209][ T4385] udevd[4385]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 549.255080][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 549.301158][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 549.350413][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 549.398743][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 549.435022][T11405] pim6reg1: entered promiscuous mode [ 549.436840][T11405] pim6reg1: entered allmulticast mode [ 549.616332][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 549.645106][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 549.695063][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 549.707963][ T8034] Bluetooth: hci0: unexpected event for opcode 0x080d [ 549.748798][T11429] netlink: 32 bytes leftover after parsing attributes in process `syz.6.17229'. [ 549.753722][T11429] netlink: 32 bytes leftover after parsing attributes in process `syz.6.17229'. [ 549.979447][T11444] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17235'. [ 549.982383][T11444] netem: invalid attributes len -17 [ 549.984374][T11444] netem: change failed [ 550.150139][ T8034] Bluetooth: hci4: command tx timeout [ 550.361773][ T24] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 550.548813][T11450] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.17238'. [ 550.554825][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 550.558331][ T24] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 550.561114][ T24] usb 5-1: can't read configurations, error -71 [ 550.759343][T11470] gretap1: entered promiscuous mode [ 550.761812][T11470] batman_adv: batadv0: Adding interface: gretap1 [ 550.764158][T11470] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 550.771492][T11470] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 550.806361][T11472] netlink: 20 bytes leftover after parsing attributes in process `syz.6.17249'. [ 550.905091][T11478] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 550.907129][T11478] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 550.910756][T11478] vhci_hcd vhci_hcd.0: Device attached [ 550.916257][T11479] vhci_hcd: connection closed [ 550.916462][ T84] vhci_hcd vhci_hcd.6: stop threads [ 550.920391][ T84] vhci_hcd vhci_hcd.6: release socket [ 550.921993][ T84] vhci_hcd vhci_hcd.6: disconnect device [ 551.290316][T11496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17259'. [ 551.294139][T11496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17259'. [ 551.458857][T11503] kvm: kvm [11501]: vcpu6, guest rIP: 0x9139 Unhandled WRMSR(0xc1) = 0xe50000000000 [ 551.462483][T11503] kvm: kvm [11501]: vcpu6, guest rIP: 0x9139 Unhandled WRMSR(0xc2) = 0xe50000000000 [ 551.481635][T11503] kvm: kvm [11501]: vcpu6, guest rIP: 0x9139 Unhandled WRMSR(0x11e) = 0xe500be702111 [ 551.500216][T11503] kvm: kvm [11501]: vcpu6, guest rIP: 0x9139 Unhandled WRMSR(0x186) = 0xe50000000000 [ 551.503704][T11503] kvm: kvm [11501]: vcpu6, guest rIP: 0x9139 Unhandled WRMSR(0x187) = 0xe50000000000 [ 551.640248][T11508] netlink: 'syz.1.17264': attribute type 12 has an invalid length. [ 551.677254][T11510] netlink: 'syz.1.17265': attribute type 15 has an invalid length. [ 551.680162][T11510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17265'. [ 551.693691][ T162] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 551.693738][T11510] netlink: 'syz.1.17265': attribute type 15 has an invalid length. [ 551.696511][ T162] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 551.700567][T11510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17265'. [ 551.703759][ T162] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 551.710379][ T162] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 552.371981][ T8017] Bluetooth: hci4: command tx timeout [ 552.437045][T11541] input: syz1 as /devices/virtual/input/input63 [ 553.657093][T11573] blk_print_req_error: 54 callbacks suppressed [ 553.657106][T11573] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 553.662658][T11573] buffer_io_error: 54 callbacks suppressed [ 553.662668][T11573] Buffer I/O error on dev nbd3, logical block 0, async page read [ 553.667707][T11573] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 553.670606][T11573] Buffer I/O error on dev nbd3, logical block 1, async page read [ 553.673118][T11573] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 553.676564][T11573] Buffer I/O error on dev nbd3, logical block 2, async page read [ 553.680097][T11573] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 553.683897][T11573] Buffer I/O error on dev nbd3, logical block 3, async page read [ 553.687065][T11573] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 553.690169][T11573] Buffer I/O error on dev nbd3, logical block 0, async page read [ 553.692833][T11573] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 553.696019][T11573] Buffer I/O error on dev nbd3, logical block 1, async page read [ 553.699323][T11573] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 553.703139][T11573] Buffer I/O error on dev nbd3, logical block 2, async page read [ 553.706686][T11573] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 553.710870][T11573] Buffer I/O error on dev nbd3, logical block 3, async page read [ 553.713874][T11573] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 553.719598][T11573] Buffer I/O error on dev nbd3, logical block 0, async page read [ 553.722426][T11573] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 553.726240][T11573] Buffer I/O error on dev nbd3, logical block 1, async page read [ 553.731576][T11573] ldm_validate_partition_table(): Disk read failed. [ 553.735251][T11573] Dev nbd3: unable to read RDB block 0 [ 553.740509][T11573] nbd3: unable to read partition table [ 553.985937][ T40] kauditd_printk_skb: 223 callbacks suppressed [ 553.985955][ T40] audit: type=1400 audit(1546.435:65033): avc: denied { create } for pid=11582 comm="syz.3.17298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 553.997627][ T40] audit: type=1400 audit(1546.435:65034): avc: denied { bind } for pid=11582 comm="syz.3.17298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 553.998792][ T8034] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 554.005432][ T40] audit: type=1400 audit(1546.435:65035): avc: denied { setopt } for pid=11582 comm="syz.3.17298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 554.016173][ T40] audit: type=1400 audit(1546.435:65036): avc: denied { accept } for pid=11582 comm="syz.3.17298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 554.024203][ T40] audit: type=1400 audit(1546.435:65037): avc: denied { write } for pid=11582 comm="syz.3.17298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 554.033390][ T40] audit: type=1400 audit(1546.435:65038): avc: denied { read } for pid=11582 comm="syz.3.17298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 554.189223][ T40] audit: type=1400 audit(1546.622:65039): avc: denied { execmem } for pid=11593 comm="syz.0.17303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 554.234318][ T40] audit: type=1400 audit(1546.669:65040): avc: denied { ioctl } for pid=11588 comm="syz.1.17301" path="socket:[169408]" dev="sockfs" ino=169408 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 554.281776][T11596] bond1: Invalid ad_actor_system MAC address. [ 554.285275][T11596] bond1: option ad_actor_system: invalid value (27571) [ 554.289735][T11596] bond1 (unregistering): Released all slaves [ 554.309673][ T162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.314384][ T162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.448179][ T40] audit: type=1400 audit(1546.865:65041): avc: denied { bpf } for pid=11602 comm="syz.1.17306" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 554.456869][ T40] audit: type=1400 audit(1546.865:65042): avc: denied { allowed } for pid=11602 comm="syz.1.17306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 554.594173][ T8017] Bluetooth: hci4: command tx timeout [ 554.686184][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 554.784824][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 554.842463][ T3926] udevd[3926]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 555.062047][T11629] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 555.072861][ T4385] udevd[4385]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 555.097455][ T3926] udevd[3926]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 555.139920][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 555.238160][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 555.299193][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 555.304200][T11644] netlink: 'syz.6.17324': attribute type 13 has an invalid length. [ 555.307703][T11644] __nla_validate_parse: 2 callbacks suppressed [ 555.307717][T11644] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17324'. [ 555.314542][T11644] netlink: 'syz.6.17324': attribute type 13 has an invalid length. [ 555.317953][T11644] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17324'. [ 555.374264][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 555.518790][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 555.977768][T11716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17354'. [ 556.026393][T11719] veth3: entered allmulticast mode [ 556.101162][ T7359] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 556.203446][T11732] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 556.233066][T11738] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17364'. [ 556.236071][T11738] netlink: 12 bytes leftover after parsing attributes in process `syz.6.17364'. [ 556.239550][T11738] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17364'. [ 556.271194][ T7359] usb 6-1: Using ep0 maxpacket: 8 [ 556.275396][ T7359] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 556.279030][ T7359] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 556.283995][ T7359] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 556.288738][ T7359] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 556.293124][ T7359] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 556.303422][ T7359] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 556.306367][T11738] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17364'. [ 556.310934][T11738] netlink: 12 bytes leftover after parsing attributes in process `syz.6.17364'. [ 556.311787][ T7359] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.314151][T11738] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17364'. [ 556.446792][T11744] SELinux: ebitmap: empty map [ 556.451472][T11744] SELinux: failed to load policy [ 556.547890][ T7359] usb 6-1: usb_control_msg returned -32 [ 556.552067][ T7359] usbtmc 6-1:16.0: can't read capabilities [ 556.884773][T11769] binder: 11767:11769 ioctl c0306201 200000000140 returned -22 [ 556.941317][T11773] netlink: 'syz.0.17379': attribute type 3 has an invalid length. [ 556.948076][T11773] netlink: 'syz.0.17379': attribute type 3 has an invalid length. [ 557.092739][T11782] dvmrp0: entered allmulticast mode [ 557.496189][T11804] 9p: Invalid uid '0x00000000ffffffff' [ 557.861282][T11815] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 557.911334][T11821] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check. [ 557.929198][ T84] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 559.085553][ T5938] usb 6-1: USB disconnect, device number 29 [ 559.299135][T11864] loop5: detected capacity change from 0 to 7 [ 559.302536][T11864] Dev loop5: unable to read RDB block 7 [ 559.309326][T11862] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 559.312536][T11864] loop5: unable to read partition table [ 559.324246][T11862] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 559.327776][T11864] loop5: partition table beyond EOD, truncated [ 559.331092][T11862] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 559.332401][T11864] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 559.357173][ T40] kauditd_printk_skb: 476 callbacks suppressed [ 559.357185][ T40] audit: type=1400 audit(1551.460:65519): avc: denied { allowed } for pid=11867 comm="syz.0.17422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 559.366769][ T40] audit: type=1400 audit(1551.469:65520): avc: denied { recv } for pid=5710 comm="syz-executor" saddr=127.0.0.1 src=53592 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 559.382823][ T40] audit: type=1400 audit(1551.488:65521): avc: denied { egress } for pid=33 comm="ksoftirqd/3" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 559.391243][ T40] audit: type=1400 audit(1551.488:65522): avc: denied { sendto } for pid=33 comm="ksoftirqd/3" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 559.413220][ T40] audit: type=1400 audit(1551.507:65523): avc: denied { read } for pid=11869 comm="syz.3.17424" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 559.420654][T11872] netlink: 'syz.1.17423': attribute type 1 has an invalid length. [ 559.426318][ T40] audit: type=1400 audit(1551.507:65524): avc: denied { open } for pid=11869 comm="syz.3.17424" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 559.433882][ T40] audit: type=1400 audit(1551.507:65525): avc: denied { ioctl } for pid=11869 comm="syz.3.17424" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 559.443403][ T40] audit: type=1400 audit(1551.525:65526): avc: denied { prog_load } for pid=11867 comm="syz.0.17422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 559.451067][ T40] audit: type=1400 audit(1551.525:65527): avc: denied { bpf } for pid=11867 comm="syz.0.17422" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 559.451691][T11875] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.17425'. [ 559.478587][T11872] 8021q: adding VLAN 0 to HW filter on device bond7 [ 559.536356][ T40] audit: type=1400 audit(1551.628:65528): avc: denied { write } for pid=11877 comm="syz.1.17427" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 560.247566][T11900] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 560.301610][T11903] binder: 11902:11903 ioctl c0306201 200000000000 returned -22 [ 560.359218][T11907] bridge1: entered promiscuous mode [ 560.364789][T11907] bridge1: entered allmulticast mode [ 560.656497][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 560.696951][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 560.756071][T11942] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 560.851580][T11949] xt_CT: No such helper "netbios-ns" [ 560.926053][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 561.046488][T11967] netlink: 'syz.0.17466': attribute type 12 has an invalid length. [ 561.049121][T11967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17466'. [ 561.057329][ T1264] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.057387][T11967] netlink: 'syz.0.17466': attribute type 12 has an invalid length. [ 561.061236][ T1264] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.064055][T11967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17466'. [ 561.066852][ T1264] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.066874][ T1264] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.067783][T11969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17467'. [ 561.067804][T11969] netlink: 'syz.3.17467': attribute type 3 has an invalid length. [ 561.067813][T11969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17467'. [ 561.085501][T11969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17467'. [ 561.091768][T11969] netlink: 'syz.3.17467': attribute type 3 has an invalid length. [ 561.095206][T11969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17467'. [ 561.264351][T11986] ipvlan2: entered allmulticast mode [ 561.266236][T11986] veth0_to_bridge: entered allmulticast mode [ 561.298902][T11988] xt_hashlimit: size too large, truncated to 1048576 [ 561.812879][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 562.070764][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 562.136081][ T4385] udevd[4385]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 562.210813][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 562.333074][T12036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17497'. [ 562.344049][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 562.385478][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 562.782402][T12072] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check. [ 562.979919][T12082] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 563.147313][T12100] bridge0: port 3(vlan2) entered blocking state [ 563.149768][T12100] bridge0: port 3(vlan2) entered disabled state [ 563.151980][T12100] vlan2: entered allmulticast mode [ 563.153904][T12100] ip6gretap0: entered allmulticast mode [ 563.156660][T12100] vlan2: entered promiscuous mode [ 563.158420][T12100] ip6gretap0: entered promiscuous mode [ 563.334724][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 563.574611][T12122] netlink: 348 bytes leftover after parsing attributes in process `syz.0.17536'. [ 563.858272][ T7366] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 563.985540][T12130] xt_hashlimit: size too large, truncated to 1048576 [ 564.019502][ T7366] usb 5-1: Using ep0 maxpacket: 8 [ 564.025669][ T7366] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 564.031239][ T7366] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 564.036677][ T7366] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.043804][ T7366] usb 5-1: config 0 descriptor?? [ 564.140576][T12134] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.17541'. [ 564.192852][T12136] xt_hashlimit: size too large, truncated to 1048576 [ 564.269298][ T7366] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 564.336260][T12147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17546'. [ 564.471810][T12157] input: syz1 as /devices/virtual/input/input64 [ 564.703216][ T7359] usb 5-1: USB disconnect, device number 15 [ 564.714582][T12177] 9pnet_virtio: no channels available for device syz [ 564.752326][ T40] kauditd_printk_skb: 238 callbacks suppressed [ 564.752338][ T40] audit: type=1400 audit(1556.504:65767): avc: denied { read } for pid=12178 comm="syz.1.17561" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 564.761816][ T40] audit: type=1400 audit(1556.504:65768): avc: denied { open } for pid=12178 comm="syz.1.17561" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 564.770442][ T40] audit: type=1400 audit(1556.504:65769): avc: denied { ioctl } for pid=12178 comm="syz.1.17561" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 565.087252][ T6996] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 565.260057][ T6996] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 565.263678][ T6996] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 565.267265][ T6996] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 565.271143][ T6996] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.276884][ T6996] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 565.281175][ T6996] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 565.283817][ T40] audit: type=1400 audit(1557.009:65770): avc: denied { create } for pid=12184 comm="syz.0.17564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 565.284516][ T6996] usb 6-1: Product: syz [ 565.286758][T12185] netlink: 'syz.0.17564': attribute type 3 has an invalid length. [ 565.293099][ T40] audit: type=1400 audit(1557.009:65771): avc: denied { write } for pid=12184 comm="syz.0.17564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 565.294579][ T6996] usb 6-1: Manufacturer: syz [ 565.297817][ T40] audit: type=1400 audit(1557.009:65772): avc: denied { read } for pid=12184 comm="syz.0.17564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 565.310076][ T6996] cdc_wdm 6-1:1.0: skipping garbage [ 565.317204][ T6996] cdc_wdm 6-1:1.0: skipping garbage [ 565.320231][ T6996] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 565.322725][ T40] audit: type=1400 audit(1557.037:65773): avc: denied { name_bind } for pid=12186 comm="syz.0.17565" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 565.331106][ T6996] cdc_wdm 6-1:1.0: Unknown control protocol [ 565.383530][ T40] audit: type=1400 audit(1557.093:65774): avc: denied { read } for pid=12190 comm="syz.6.17567" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 565.394931][ T40] audit: type=1400 audit(1557.093:65775): avc: denied { open } for pid=12190 comm="syz.6.17567" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 565.407877][ T40] audit: type=1400 audit(1557.093:65776): avc: denied { ioctl } for pid=12190 comm="syz.6.17567" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 565.531813][ T6662] usb 6-1: USB disconnect, device number 30 [ 565.553198][ T6996] IPVS: starting estimator thread 0... [ 565.608579][T12205] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 565.631040][T12202] netlink: 'syz.3.17571': attribute type 4 has an invalid length. [ 565.656141][T12199] IPVS: using max 31 ests per chain, 74400 per kthread [ 566.012757][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 566.075699][ T4385] udevd[4385]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 566.088156][T12236] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 566.458336][T12257] loop4: detected capacity change from 0 to 2640 [ 566.461414][T12257] buffer_io_error: 54 callbacks suppressed [ 566.461431][T12257] Buffer I/O error on dev loop4, logical block 0, async page read [ 566.471323][T12257] Buffer I/O error on dev loop4, logical block 0, async page read [ 566.474944][T12257] Buffer I/O error on dev loop4, logical block 0, async page read [ 566.480725][T12257] Buffer I/O error on dev loop4, logical block 0, async page read [ 566.484400][T12257] Buffer I/O error on dev loop4, logical block 0, async page read [ 566.488228][T12257] Buffer I/O error on dev loop4, logical block 0, async page read [ 566.491897][T12257] Buffer I/O error on dev loop4, logical block 0, async page read [ 566.495455][T12257] Buffer I/O error on dev loop4, logical block 0, async page read [ 566.499562][T12257] ldm_validate_partition_table(): Disk read failed. [ 566.502623][T12257] Buffer I/O error on dev loop4, logical block 0, async page read [ 566.506215][T12257] Buffer I/O error on dev loop4, logical block 0, async page read [ 566.510626][T12257] Dev loop4: unable to read RDB block 0 [ 566.513506][T12257] loop4: unable to read partition table [ 566.516355][T12257] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 566.541664][ T3958] udevd[3958]: symlink '../../loop4' '/dev/disk/by-diskseq/136.tmp-b7:4' failed: Read-only file system [ 566.601210][ T3958] udevd[3958]: symlink '../../loop4' '/dev/disk/by-diskseq/136.tmp-b7:4' failed: Read-only file system [ 566.624291][ T3958] udevd[3958]: symlink '../../loop4' '/dev/disk/by-diskseq/136.tmp-b7:4' failed: Read-only file system [ 566.637251][ T3958] udevd[3958]: symlink '../../loop4' '/dev/disk/by-diskseq/137.tmp-b7:4' failed: Read-only file system [ 566.959991][T12285] __nla_validate_parse: 3 callbacks suppressed [ 566.960003][T12285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17607'. [ 567.003268][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 567.018725][T12290] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 567.063789][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 567.098020][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 567.139676][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 567.516894][T12324] netlink: 276 bytes leftover after parsing attributes in process `syz.3.17624'. [ 567.713804][T12328] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17626'. [ 567.718128][T12328] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17626'. [ 567.798762][T12338] 9pnet_virtio: no channels available for device syz [ 568.087898][T12348] kvm: kvm [12347]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 568.092912][T12348] kvm: kvm [12347]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 568.304036][T12353] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 569.114546][T12383] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17650'. [ 569.238356][T12389] netlink: 'syz.1.17652': attribute type 7 has an invalid length. [ 569.241820][T12389] netlink: 'syz.1.17652': attribute type 7 has an invalid length. [ 570.103882][ T40] kauditd_printk_skb: 139 callbacks suppressed [ 570.103894][ T40] audit: type=1400 audit(1561.520:65916): avc: denied { write } for pid=12432 comm="syz.6.17671" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 570.114594][ T40] audit: type=1400 audit(1561.529:65917): avc: denied { ioctl } for pid=12432 comm="syz.6.17671" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 570.152996][T12435] netlink: 'syz.6.17672': attribute type 1 has an invalid length. [ 570.155580][T12435] netlink: 'syz.6.17672': attribute type 4 has an invalid length. [ 570.158128][T12435] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.17672'. [ 570.234133][ T40] audit: type=1400 audit(1561.632:65918): avc: denied { mount } for pid=12438 comm="syz.6.17674" name="/" dev="ramfs" ino=173845 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 570.244965][ T40] audit: type=1400 audit(1561.641:65919): avc: denied { recv } for pid=5709 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=53592 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 570.310251][ T40] audit: type=1400 audit(1561.707:65920): avc: denied { load_policy } for pid=12440 comm="syz.6.17675" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 570.314457][T12441] SELinux: ebitmap start bit (4294967168) is beyond the end of the bitmap (1472) [ 570.328190][T12441] SELinux: failed to load policy [ 570.368898][ T40] audit: type=1400 audit(1561.763:65921): avc: denied { read write } for pid=12442 comm="syz.6.17676" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 570.381810][ T40] audit: type=1400 audit(1561.763:65922): avc: denied { open } for pid=12442 comm="syz.6.17676" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 570.392745][ T40] audit: type=1400 audit(1561.772:65923): avc: denied { map } for pid=12442 comm="syz.6.17676" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 570.403041][ T40] audit: type=1400 audit(1561.772:65924): avc: denied { execmem } for pid=12442 comm="syz.6.17676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 570.411695][ T40] audit: type=1400 audit(1561.772:65925): avc: denied { execute } for pid=12442 comm="syz.6.17676" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 570.752445][T12456] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 570.786827][T12461] xt_hashlimit: size too large, truncated to 1048576 [ 570.909456][T12474] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 571.311172][ T7366] [drm:virtio_gpu_dequeue_ctrl_func] *ERROR* response 0x1205 (command 0x105) [ 572.366694][T12509] SELinux: ebitmap: high bit 1536 is not equal to the expected value 1152 [ 572.372592][T12509] SELinux: failed to load policy [ 572.674216][ T6996] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 572.819846][T12528] IPv4: Oversized IP packet from 127.202.26.0 [ 572.846587][ T6996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.850193][ T6996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.853156][ T6996] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 572.856649][ T6996] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.860563][ T6996] usb 6-1: config 0 descriptor?? [ 572.929411][T12413] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 572.978717][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 573.036206][T12539] netlink: 'syz.6.17717': attribute type 1 has an invalid length. [ 573.045671][ T4385] udevd[4385]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 573.053303][T12539] bond1: entered promiscuous mode [ 573.055922][T12539] 8021q: adding VLAN 0 to HW filter on device bond1 [ 573.075546][T12539] netlink: 3 bytes leftover after parsing attributes in process `syz.6.17717'. [ 573.087906][T12539] bond1: (slave bridge2): making interface the new active one [ 573.090587][T12539] bridge2: entered promiscuous mode [ 573.093878][T12539] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 573.145877][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 573.234494][T12558] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 573.237811][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 573.296485][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 573.298947][ T6996] cm6533_jd 0003:0D8C:0022.0011: unknown main item tag 0x0 [ 573.302519][ T6996] cm6533_jd 0003:0D8C:0022.0011: unknown main item tag 0x0 [ 573.311084][ T6996] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0D8C:0022.0011/input/input65 [ 573.362444][ T6996] cm6533_jd 0003:0D8C:0022.0011: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 573.398550][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 573.410928][ T3938] udevd[3938]: symlink '../../loop5' '/dev/disk/by-diskseq/138.tmp-b7:5' failed: Read-only file system [ 573.460761][T12574] xt_hashlimit: size too large, truncated to 1048576 [ 573.512182][ T6996] usb 6-1: USB disconnect, device number 31 [ 573.532333][ T3926] udevd[3926]: symlink '../../loop5' '/dev/disk/by-diskseq/138.tmp-b7:5' failed: Read-only file system [ 573.532360][T12577] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.545436][ T3958] udevd[3958]: symlink '../../loop5' '/dev/disk/by-diskseq/138.tmp-b7:5' failed: Read-only file system [ 573.554202][T12577] bridge_slave_0 (unregistering): left allmulticast mode [ 573.557033][T12577] bridge_slave_0 (unregistering): left promiscuous mode [ 573.559262][T12577] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.741907][T12588] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17738'. [ 574.132632][T12605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17744'. [ 574.264554][T12617] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 574.308364][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 575.114427][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.118543][ T6662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.452748][T12677] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input66 [ 575.516951][ T40] kauditd_printk_skb: 197 callbacks suppressed [ 575.516969][ T40] audit: type=1400 audit(1566.582:66123): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=53592 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 575.558440][ T40] audit: type=1400 audit(1566.620:66124): avc: denied { read write } for pid=12684 comm="syz.6.17774" name="vhost-vsock" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 575.568313][ T40] audit: type=1400 audit(1566.620:66125): avc: denied { open } for pid=12684 comm="syz.6.17774" path="/dev/vhost-vsock" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 575.578919][ T40] audit: type=1400 audit(1566.639:66126): avc: denied { ioctl } for pid=12684 comm="syz.6.17774" path="/dev/vhost-vsock" dev="devtmpfs" ino=1300 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 575.612264][ T40] audit: type=1400 audit(1566.667:66127): avc: denied { read write } for pid=12687 comm="syz.3.17775" name="vmci" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 575.624862][ T40] audit: type=1400 audit(1566.667:66128): avc: denied { open } for pid=12687 comm="syz.3.17775" path="/dev/vmci" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 575.634671][ T40] audit: type=1400 audit(1566.685:66129): avc: denied { ioctl } for pid=12687 comm="syz.3.17775" path="/dev/vmci" dev="devtmpfs" ino=708 ioctlcmd=0x7a7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 575.691061][ T40] audit: type=1400 audit(1566.742:66130): avc: denied { unmount } for pid=5948 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 575.711661][ T40] audit: type=1400 audit(1566.760:66131): avc: denied { create } for pid=12691 comm="syz.6.17777" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 575.746863][ T40] audit: type=1400 audit(1566.788:66132): avc: denied { create } for pid=12693 comm="syz.3.17778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 575.795002][ T1163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.800966][ T1264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.804590][ T1264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.808913][ T108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.814720][ T6996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.820291][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.840300][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.151345][T12721] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.17790'. [ 576.219104][T12724] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 576.481418][T12739] kvm: Disabled LAPIC found during irq injection [ 577.344101][ T8017] Bluetooth: hci0: command 0x1407 tx timeout [ 577.521956][T12804] 9pnet_virtio: no channels available for device syz [ 577.560428][T12802] SELinux: ebitmap start bit (3993042943) is not a multiple of the map unit size (64) [ 577.570720][T12802] SELinux: failed to load policy [ 577.660791][T12812] netlink: 12 bytes leftover after parsing attributes in process `syz.6.17827'. [ 577.883351][T12829] ubi: mtd0 is already attached to ubi31 [ 577.986161][T12833] kvm: user requested TSC rate below hardware speed [ 577.991535][T12833] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 577.998779][T12833] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 578.158355][T12845] netlink: 'syz.0.17839': attribute type 1 has an invalid length. [ 578.173371][T12845] bond1: entered promiscuous mode [ 578.175512][T12845] 8021q: adding VLAN 0 to HW filter on device bond1 [ 578.199823][T12845] 8021q: adding VLAN 0 to HW filter on device bond1 [ 578.202349][T12845] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 578.205796][T12845] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 578.211066][T12845] bond1: (slave ip6gre1): making interface the new active one [ 578.215379][T12845] ip6gre1: entered promiscuous mode [ 578.218524][T12845] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 578.505171][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 578.558096][ T24] libceph: connect (1)[c::]:6789 error -101 [ 578.566284][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 578.590975][ T5938] libceph: connect (1)[c::]:6789 error -101 [ 578.593793][ T5938] libceph: mon0 (1)[c::]:6789 connect error [ 578.865590][ T24] libceph: connect (1)[c::]:6789 error -101 [ 578.869483][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 578.874488][ T5938] libceph: connect (1)[c::]:6789 error -101 [ 578.877305][ T5938] libceph: mon0 (1)[c::]:6789 connect error [ 579.128748][ T34] net_ratelimit: 19 callbacks suppressed [ 579.128761][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.217564][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.390668][T12859] ceph: No mds server is up or the cluster is laggy [ 579.390706][T12865] ceph: No mds server is up or the cluster is laggy [ 579.426930][ T24] libceph: connect (1)[c::]:6789 error -101 [ 579.429883][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 579.430916][ T5938] libceph: connect (1)[c::]:6789 error -101 [ 579.435396][ T5938] libceph: mon0 (1)[c::]:6789 connect error [ 579.485820][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 579.544632][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 579.596318][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 579.666722][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 579.671957][T12895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.680030][T12895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.683913][T12895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.691316][T12894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.701724][T12894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.743175][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 579.787315][T12901] netlink: 'syz.0.17858': attribute type 12 has an invalid length. [ 580.326856][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.359245][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 580.929471][ T40] kauditd_printk_skb: 126 callbacks suppressed [ 580.929487][ T40] audit: type=1400 audit(1571.645:66259): avc: denied { read } for pid=12936 comm="syz.0.17863" dev="nsfs" ino=4026534554 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 580.940584][ T40] audit: type=1400 audit(1571.654:66260): avc: denied { open } for pid=12936 comm="syz.0.17863" path="net:[4026534554]" dev="nsfs" ino=4026534554 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 580.950310][ T40] audit: type=1400 audit(1571.654:66261): avc: denied { create } for pid=12936 comm="syz.0.17863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 580.958628][ T40] audit: type=1400 audit(1571.654:66262): avc: denied { bind } for pid=12936 comm="syz.0.17863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 581.196285][T12839] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 581.227491][T12940] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17864'. [ 581.231019][T12940] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17864'. [ 581.263278][ T40] audit: type=1400 audit(1571.954:66263): avc: denied { mounton } for pid=12941 comm="syz.1.17865" path="/4621/file0" dev="tmpfs" ino=23507 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 581.276315][ T40] audit: type=1400 audit(1571.963:66264): avc: denied { prog_load } for pid=12943 comm="syz.3.17866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 581.289832][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 581.297024][ T40] audit: type=1400 audit(1571.963:66265): avc: denied { bpf } for pid=12943 comm="syz.3.17866" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 581.304548][ T40] audit: type=1400 audit(1571.982:66266): avc: denied { mounton } for pid=12945 comm="syz.6.17867" path="/761/file0" dev="tmpfs" ino=4025 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 581.313275][ T40] audit: type=1400 audit(1571.982:66267): avc: denied { unlink } for pid=12945 comm="syz.6.17867" name="#86" dev="tmpfs" ino=4029 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 581.324341][ T40] audit: type=1400 audit(1571.982:66268): avc: denied { mount } for pid=12945 comm="syz.6.17867" name="/" dev="overlay" ino=4025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 581.359936][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 581.377170][T12953] Invalid argument reading file caps for ./file0 [ 581.418523][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 581.435616][T12956] sctp: [Deprecated]: syz.3.17871 (pid 12956) Use of int in maxseg socket option. [ 581.435616][T12956] Use struct sctp_assoc_value instead [ 581.440447][ T6662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.765940][T12974] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 581.861687][T12980] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17881'. [ 581.954228][T12987] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17884'. [ 581.960761][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.981266][T12987] 8021q: adding VLAN 0 to HW filter on device bond2 [ 582.002573][T12987] bond2: (slave hsr0): The slave device specified does not support setting the MAC address [ 582.007394][T12987] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 582.011931][T12987] bond2: (slave hsr0): Error -22 calling dev_set_mtu [ 582.089099][ T6662] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 582.259645][ T6662] usb 11-1: Using ep0 maxpacket: 32 [ 582.263694][ T6662] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 582.267472][ T6662] usb 11-1: config 0 has no interface number 0 [ 582.275768][ T6662] usb 11-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 582.284528][ T6662] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.288067][ T6662] usb 11-1: Product: syz [ 582.289968][ T6662] usb 11-1: Manufacturer: syz [ 582.292200][ T6662] usb 11-1: SerialNumber: syz [ 582.297474][ T6662] usb 11-1: config 0 descriptor?? [ 582.306331][ T6662] usb 11-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 582.311100][ T6662] usb 11-1: selecting invalid altsetting 1 [ 582.313832][ T6662] usb 11-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 582.326726][ T6662] usb 11-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 582.331585][ T6662] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 582.335674][ T6662] usb 11-1: media controller created [ 582.353214][ T6662] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 582.531665][ T6662] usb 11-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 582.535892][ T6662] zl10353_read_register: readreg error (reg=127, ret==-71) [ 582.540302][ T6662] usb 11-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 582.599186][ T6662] usb 11-1: USB disconnect, device number 11 [ 583.061199][ T8017] Bluetooth: hci5: command 0x1003 tx timeout [ 583.065592][ T8034] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 583.359668][ T8034] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 583.377552][T13030] netlink: 'syz.1.17902': attribute type 18 has an invalid length. [ 583.380699][T13030] netlink: 'syz.1.17902': attribute type 18 has an invalid length. [ 583.838474][ T8034] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 583.841944][ T8034] Bluetooth: Wrong link type (-22) [ 583.901157][T13055] kvm: kvm [13053]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 583.911261][T13055] kvm: kvm [13053]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 584.309360][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 584.382931][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 584.399849][T13078] netlink: 372 bytes leftover after parsing attributes in process `syz.6.17921'. [ 584.495436][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 584.510862][T13084] net_ratelimit: 4 callbacks suppressed [ 584.510873][T13084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.519948][T13084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.522967][T13084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.530734][T13084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.533437][T13084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.537260][T13083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.588633][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 584.649621][T13088] syzkaller0: entered promiscuous mode [ 584.655769][T13088] syzkaller0: entered allmulticast mode [ 584.689061][T13094] xt_hashlimit: size too large, truncated to 1048576 [ 584.729786][T13097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17929'. [ 584.770048][T13097] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17929'. [ 584.774532][ T845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.896975][T13101] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3596000302 (14384001208 ns) > initial count (4696682236 ns). Using initial count to start timer. [ 585.013806][T13106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.018801][T13106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.020717][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 585.034292][T13106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.079881][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 585.083645][T13110] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13110 comm=syz.6.17934 [ 585.088577][T13110] netlink: 'syz.6.17934': attribute type 1 has an invalid length. [ 585.949446][T13119] input: syz0 as /devices/virtual/input/input67 [ 586.416632][ T40] kauditd_printk_skb: 125 callbacks suppressed [ 586.416649][ T40] audit: type=1400 audit(1576.773:66394): avc: denied { allowed } for pid=13123 comm="syz.1.17938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 586.428421][ T40] audit: type=1400 audit(1576.792:66395): avc: denied { create } for pid=13123 comm="syz.1.17938" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 586.466512][ T40] audit: type=1400 audit(1576.829:66396): avc: denied { write } for pid=13125 comm="syz.1.17939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 586.467060][T13126] netlink: 152868 bytes leftover after parsing attributes in process `syz.1.17939'. [ 586.537844][ T40] audit: type=1400 audit(1576.895:66397): avc: denied { mounton } for pid=13127 comm="syz.1.17940" path="/4650/bus" dev="tmpfs" ino=23668 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 586.552375][ T40] audit: type=1400 audit(1576.904:66398): avc: denied { unlink } for pid=13127 comm="syz.1.17940" name="#90" dev="tmpfs" ino=23672 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 586.560456][ T40] audit: type=1400 audit(1576.904:66399): avc: denied { mount } for pid=13127 comm="syz.1.17940" name="/" dev="overlay" ino=23667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 586.584142][ T40] audit: type=1400 audit(1576.932:66400): avc: denied { unmount } for pid=5948 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 586.623553][ T40] audit: type=1400 audit(1576.979:66401): avc: denied { read write } for pid=13129 comm="syz.1.17941" name="video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 586.631231][ T40] audit: type=1400 audit(1576.979:66402): avc: denied { open } for pid=13129 comm="syz.1.17941" path="/dev/video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 586.639252][ T40] audit: type=1400 audit(1576.989:66403): avc: denied { ioctl } for pid=13129 comm="syz.1.17941" path="/dev/video3" dev="devtmpfs" ino=959 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 587.143197][ T34] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 587.315447][ T34] usb 6-1: config 0 has no interfaces? [ 587.318916][ T34] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 587.321873][ T34] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 587.324525][ T34] usb 6-1: Product: syz [ 587.326177][ T34] usb 6-1: Manufacturer: syz [ 587.327622][ T34] usb 6-1: SerialNumber: syz [ 587.330745][ T34] usb 6-1: config 0 descriptor?? [ 587.650847][T13110] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 587.829899][T13147] netlink: 12 bytes leftover after parsing attributes in process `syz.6.17947'. [ 587.837262][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 587.894613][ T8034] block nbd7: Receive control failed (result -107) [ 587.920627][T13134] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 587.926377][T13134] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.987758][T13153] netlink: 'syz.0.17950': attribute type 19 has an invalid length. [ 587.993591][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 588.087253][ T3958] udevd[3958]: symlink '../../loop6' '/dev/disk/by-diskseq/128.tmp-b7:6' failed: Read-only file system [ 588.154729][ T1163] [ 588.155564][ T1163] ====================================================== [ 588.157853][ T1163] WARNING: possible circular locking dependency detected [ 588.160182][ T1163] syzkaller #0 Tainted: G L [ 588.162167][ T1163] ------------------------------------------------------ [ 588.164379][ T1163] kworker/u32:7/1163 is trying to acquire lock: [ 588.166377][ T1163] ffffffff8e9b18c0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 588.169900][ T1163] [ 588.169900][ T1163] but task is already holding lock: [ 588.172290][ T1163] ffff8880376e2ae0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x43/0xa0 [ 588.175606][ T1163] [ 588.175606][ T1163] which lock already depends on the new lock. [ 588.175606][ T1163] [ 588.178815][ T1163] [ 588.178815][ T1163] the existing dependency chain (in reverse order) is: [ 588.181922][ T1163] [ 588.181922][ T1163] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}: [ 588.184706][ T1163] lock_sock_nested+0x41/0xf0 [ 588.186459][ T1163] mptcp_connect+0x660/0xaf0 [ 588.188247][ T1163] __inet_stream_connect+0x208/0xfa0 [ 588.190312][ T1163] inet_stream_connect+0x57/0xa0 [ 588.192092][ T1163] __sys_connect_file+0x141/0x1a0 [ 588.193934][ T1163] __sys_connect+0x141/0x170 [ 588.195815][ T1163] __x64_sys_connect+0x72/0xb0 [ 588.197505][ T1163] do_syscall_64+0x10b/0xf80 [ 588.199177][ T1163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.201198][ T1163] [ 588.201198][ T1163] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 588.203964][ T1163] lock_sock_nested+0x41/0xf0 [ 588.205663][ T1163] inet_shutdown+0x67/0x410 [ 588.207714][ T1163] nbd_mark_nsock_dead+0xae/0x5c0 [ 588.209972][ T1163] recv_work+0x5fb/0x8c0 [ 588.212035][ T1163] process_one_work+0xa0e/0x1980 [ 588.213928][ T1163] worker_thread+0x5ef/0xe50 [ 588.215603][ T1163] kthread+0x370/0x450 [ 588.217110][ T1163] ret_from_fork+0x72b/0xd50 [ 588.218905][ T1163] ret_from_fork_asm+0x1a/0x30 [ 588.220659][ T1163] [ 588.220659][ T1163] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 588.223464][ T1163] __mutex_lock+0x1a4/0x1b10 [ 588.225148][ T1163] nbd_queue_rq+0x428/0x1080 [ 588.226920][ T1163] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 588.228871][ T1163] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 588.231513][ T1163] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 588.233591][ T1163] blk_mq_run_hw_queue+0x23c/0x670 [ 588.235375][ T1163] blk_mq_dispatch_list+0x51d/0x1360 [ 588.237649][ T1163] blk_mq_flush_plug_list+0x130/0x600 [ 588.239548][ T1163] __blk_flush_plug+0x2c4/0x4b0 [ 588.241256][ T1163] __submit_bio+0x584/0x6c0 [ 588.243267][ T1163] submit_bio_noacct_nocheck+0x543/0xbf0 [ 588.245276][ T1163] submit_bio_noacct+0xd18/0x2000 [ 588.247096][ T1163] submit_bh_wbc+0x681/0x890 [ 588.248759][ T1163] block_read_full_folio+0x264/0x8e0 [ 588.250621][ T1163] filemap_read_folio+0xfc/0x3b0 [ 588.252363][ T1163] do_read_cache_folio+0x2d7/0x6b0 [ 588.254150][ T1163] read_part_sector+0xd1/0x370 [ 588.255830][ T1163] adfspart_check_ICS+0x91/0x7d0 [ 588.257540][ T1163] bdev_disk_changed+0x7a3/0x1250 [ 588.259274][ T1163] blkdev_get_whole+0x187/0x290 [ 588.261001][ T1163] bdev_open+0x2c7/0xe40 [ 588.262572][ T1163] blkdev_open+0x34e/0x4f0 [ 588.264143][ T1163] do_dentry_open+0x6d8/0x1660 [ 588.265811][ T1163] vfs_open+0x82/0x3f0 [ 588.267328][ T1163] path_openat+0x208c/0x31a0 [ 588.269112][ T1163] do_file_open+0x20e/0x430 [ 588.270801][ T1163] do_sys_openat2+0x10d/0x1e0 [ 588.272488][ T1163] __x64_sys_openat+0x12d/0x210 [ 588.274198][ T1163] do_syscall_64+0x10b/0xf80 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 588.275841][ T1163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.277979][ T1163] [ 588.277979][ T1163] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 588.280449][ T1163] __mutex_lock+0x1a4/0x1b10 [ 588.282305][ T1163] nbd_queue_rq+0xba/0x1080 [ 588.283916][ T1163] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 588.286292][ T1163] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 588.288469][ T1163] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 588.290583][ T1163] blk_mq_run_hw_queue+0x23c/0x670 [ 588.292407][ T1163] blk_mq_dispatch_list+0x51d/0x1360 [ 588.294302][ T1163] blk_mq_flush_plug_list+0x130/0x600 [ 588.296582][ T1163] __blk_flush_plug+0x2c4/0x4b0 [ 588.298342][ T1163] __submit_bio+0x584/0x6c0 [ 588.300309][ T1163] submit_bio_noacct_nocheck+0x543/0xbf0 [ 588.302801][ T1163] submit_bio_noacct+0xd18/0x2000 [ 588.305023][ T1163] submit_bh_wbc+0x681/0x890 [ 588.307103][ T1163] block_read_full_folio+0x264/0x8e0 [ 588.309486][ T1163] filemap_read_folio+0xfc/0x3b0 [ 588.311724][ T1163] do_read_cache_folio+0x2d7/0x6b0 [ 588.313984][ T1163] read_part_sector+0xd1/0x370 [ 588.316084][ T1163] adfspart_check_ICS+0x91/0x7d0 [ 588.318170][ T1163] bdev_disk_changed+0x7a3/0x1250 [ 588.320371][ T1163] blkdev_get_whole+0x187/0x290 [ 588.322226][ T1163] bdev_open+0x2c7/0xe40 [ 588.324105][ T1163] blkdev_open+0x34e/0x4f0 [ 588.326105][ T1163] do_dentry_open+0x6d8/0x1660 [ 588.328250][ T1163] vfs_open+0x82/0x3f0 [ 588.329925][ T1163] path_openat+0x208c/0x31a0 [ 588.331606][ T1163] do_file_open+0x20e/0x430 [ 588.333201][ T1163] do_sys_openat2+0x10d/0x1e0 [ 588.335166][ T1163] __x64_sys_openat+0x12d/0x210 [ 588.337287][ T1163] do_syscall_64+0x10b/0xf80 [ 588.339159][ T1163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.341687][ T1163] [ 588.341687][ T1163] -> #3 (set->srcu){.+.+}-{0:0}: [ 588.344264][ T1163] __synchronize_srcu+0xa2/0x300 [ 588.345921][ T1163] blk_mq_quiesce_queue+0x149/0x1c0 [ 588.347621][ T1163] elevator_switch+0x17b/0x7e0 [ 588.349463][ T1163] elevator_change+0x352/0x530 [ 588.351345][ T1163] elevator_set_default+0x29e/0x360 [ 588.353233][ T1163] blk_register_queue+0x48e/0x630 [ 588.355161][ T1163] __add_disk+0x73f/0xe40 [ 588.356772][ T1163] add_disk_fwnode+0x118/0x5c0 [ 588.358711][ T1163] nbd_dev_add+0x77a/0xb10 [ 588.360736][ T1163] nbd_init+0x291/0x2b0 [ 588.362331][ T1163] do_one_initcall+0x121/0x750 [ 588.364477][ T1163] kernel_init_freeable+0x6ea/0x7b0 [ 588.366370][ T1163] kernel_init+0x1f/0x1e0 [ 588.367925][ T1163] ret_from_fork+0x72b/0xd50 [ 588.369570][ T1163] ret_from_fork_asm+0x1a/0x30 [ 588.371288][ T1163] [ 588.371288][ T1163] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 588.373769][ T1163] __mutex_lock+0x1a4/0x1b10 [ 588.375374][ T1163] elevator_change+0x1bc/0x530 [ 588.377031][ T1163] elevator_set_none+0x92/0xf0 [ 588.378733][ T1163] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 588.380724][ T1163] nbd_start_device+0x1a6/0xbd0 [ 588.382497][ T1163] nbd_genl_connect+0xff2/0x1a40 [ 588.384600][ T1163] genl_family_rcv_msg_doit+0x214/0x300 [ 588.387068][ T1163] genl_rcv_msg+0x560/0x800 [ 588.388819][ T1163] netlink_rcv_skb+0x159/0x420 [ 588.390934][ T1163] genl_rcv+0x28/0x40 [ 588.392864][ T1163] netlink_unicast+0x585/0x850 [ 588.394948][ T1163] netlink_sendmsg+0x8b0/0xda0 [ 588.397011][ T1163] ____sys_sendmsg+0x9e1/0xb70 [ 588.399161][ T1163] ___sys_sendmsg+0x190/0x1e0 [ 588.401211][ T1163] __sys_sendmsg+0x170/0x220 [ 588.403275][ T1163] do_syscall_64+0x10b/0xf80 [ 588.404935][ T1163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.406976][ T1163] [ 588.406976][ T1163] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 588.409695][ T1163] blk_alloc_queue+0x610/0x790 [ 588.411668][ T1163] blk_mq_alloc_queue+0x174/0x290 [ 588.413824][ T1163] __blk_mq_alloc_disk+0x29/0x120 [ 588.415966][ T1163] nbd_dev_add+0x492/0xb10 [ 588.417919][ T1163] nbd_init+0x291/0x2b0 [ 588.419822][ T1163] do_one_initcall+0x121/0x750 [ 588.421688][ T1163] kernel_init_freeable+0x6ea/0x7b0 [ 588.423543][ T1163] kernel_init+0x1f/0x1e0 [ 588.425330][ T1163] ret_from_fork+0x72b/0xd50 [ 588.427382][ T1163] ret_from_fork_asm+0x1a/0x30 [ 588.429520][ T1163] [ 588.429520][ T1163] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 588.432092][ T1163] __lock_acquire+0x14b8/0x2630 [ 588.433900][ T1163] lock_acquire+0x1b1/0x370 [ 588.435943][ T1163] fs_reclaim_acquire+0xc4/0x100 [ 588.438149][ T1163] kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 588.440544][ T1163] __alloc_skb+0x140/0x710 [ 588.442376][ T1163] tcp_stream_alloc_skb+0x34/0x660 [ 588.444573][ T1163] tcp_connect+0xf06/0x5530 [ 588.446568][ T1163] tcp_v6_connect+0x1b1f/0x23e0 [ 588.448310][ T1163] __inet_stream_connect+0x208/0xfa0 [ 588.450195][ T1163] inet_stream_connect+0x57/0xa0 [ 588.451958][ T1163] kernel_connect+0x107/0x160 [ 588.453626][ T1163] rds_tcp_conn_path_connect+0x72b/0xaa0 [ 588.455579][ T1163] rds_connect_worker+0x1b4/0x2d0 [ 588.457279][ T1163] process_one_work+0xa0e/0x1980 [ 588.459024][ T1163] worker_thread+0x5ef/0xe50 [ 588.460645][ T1163] kthread+0x370/0x450 [ 588.462171][ T1163] ret_from_fork+0x72b/0xd50 [ 588.464067][ T1163] ret_from_fork_asm+0x1a/0x30 [ 588.466141][ T1163] [ 588.466141][ T1163] other info that might help us debug this: [ 588.466141][ T1163] [ 588.469431][ T1163] Chain exists of: [ 588.469431][ T1163] fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6 [ 588.469431][ T1163] [ 588.473911][ T1163] Possible unsafe locking scenario: [ 588.473911][ T1163] [ 588.476620][ T1163] CPU0 CPU1 [ 588.478348][ T1163] ---- ---- [ 588.480026][ T1163] lock(k-sk_lock-AF_INET6); [ 588.481554][ T1163] lock(sk_lock-AF_INET6); [ 588.483753][ T1163] lock(k-sk_lock-AF_INET6); [ 588.485986][ T1163] lock(fs_reclaim); [ 588.487270][ T1163] [ 588.487270][ T1163] *** DEADLOCK *** [ 588.487270][ T1163] [ 588.489799][ T1163] 4 locks held by kworker/u32:7/1163: [ 588.491536][ T1163] #0: ffff888028ac2940 ((wq_completion)krds_cp_wq#20/0){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 588.495213][ T1163] #1: ffffc9000671fd08 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 588.499138][ T1163] #2: ffff88803c3fb680 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1da/0xaa0 [ 588.502600][ T1163] #3: ffff8880376e2ae0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x43/0xa0 [ 588.505753][ T1163] [ 588.505753][ T1163] stack backtrace: [ 588.507629][ T1163] CPU: 0 UID: 0 PID: 1163 Comm: kworker/u32:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 588.507645][ T1163] Tainted: [L]=SOFTLOCKUP [ 588.507648][ T1163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 588.507657][ T1163] Workqueue: krds_cp_wq#20/0 rds_connect_worker [ 588.507671][ T1163] Call Trace: [ 588.507676][ T1163] [ 588.507682][ T1163] dump_stack_lvl+0x100/0x190 [ 588.507695][ T1163] print_circular_bug.cold+0x178/0x1c7 [ 588.507712][ T1163] check_noncircular+0x146/0x160 [ 588.507726][ T1163] __lock_acquire+0x14b8/0x2630 [ 588.507742][ T1163] lock_acquire+0x1b1/0x370 [ 588.507755][ T1163] ? kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 588.507774][ T1163] fs_reclaim_acquire+0xc4/0x100 [ 588.507786][ T1163] ? kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 588.507802][ T1163] kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 588.507818][ T1163] ? __alloc_skb+0x140/0x710 [ 588.507835][ T1163] __alloc_skb+0x140/0x710 [ 588.507851][ T1163] ? __pfx___alloc_skb+0x10/0x10 [ 588.507868][ T1163] tcp_stream_alloc_skb+0x34/0x660 [ 588.507885][ T1163] tcp_connect+0xf06/0x5530 [ 588.507898][ T1163] ? secure_tcpv6_seq_and_ts_off+0x218/0x310 [ 588.507911][ T1163] ? __pfx_tcp_connect+0x10/0x10 [ 588.507921][ T1163] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 588.507937][ T1163] ? inet6_hash_connect+0xe7/0x180 [ 588.507949][ T1163] tcp_v6_connect+0x1b1f/0x23e0 [ 588.507964][ T1163] ? __pfx_tcp_v6_connect+0x10/0x10 [ 588.507978][ T1163] ? __lock_acquire+0x4a5/0x2630 [ 588.507990][ T1163] ? __lock_acquire+0x4a5/0x2630 [ 588.508004][ T1163] __inet_stream_connect+0x208/0xfa0 [ 588.508021][ T1163] ? __pfx___inet_stream_connect+0x10/0x10 [ 588.508037][ T1163] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 588.508053][ T1163] ? __local_bh_enable_ip+0x9e/0x120 [ 588.508070][ T1163] inet_stream_connect+0x57/0xa0 [ 588.508085][ T1163] kernel_connect+0x107/0x160 [ 588.508097][ T1163] ? __pfx_kernel_connect+0x10/0x10 [ 588.508110][ T1163] ? __local_bh_enable_ip+0x9e/0x120 [ 588.508126][ T1163] rds_tcp_conn_path_connect+0x72b/0xaa0 [ 588.508158][ T1163] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 588.508175][ T1163] ? lock_acquire+0x5e/0x370 [ 588.508189][ T1163] rds_connect_worker+0x1b4/0x2d0 [ 588.508202][ T1163] process_one_work+0xa0e/0x1980 [ 588.508218][ T1163] ? __pfx_process_one_work+0x10/0x10 [ 588.508233][ T1163] ? __pfx_rds_connect_worker+0x10/0x10 [ 588.508246][ T1163] worker_thread+0x5ef/0xe50 [ 588.508262][ T1163] ? kthread+0x13a/0x450 [ 588.508274][ T1163] ? __pfx_worker_thread+0x10/0x10 [ 588.508291][ T1163] kthread+0x370/0x450 [ 588.508303][ T1163] ? __pfx_kthread+0x10/0x10 [ 588.508316][ T1163] ret_from_fork+0x72b/0xd50 [ 588.508329][ T1163] ? __pfx_ret_from_fork+0x10/0x10 [ 588.508342][ T1163] ? __switch_to+0x800/0x1100 [ 588.508357][ T1163] ? __pfx_kthread+0x10/0x10 [ 588.508370][ T1163] ret_from_fork_asm+0x1a/0x30 [ 588.508388][ T1163] [ 588.709839][T13153] netlink: 'syz.0.17950': attribute type 19 has an invalid length. [ 588.890232][T13134] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 588.894311][T13134] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.015608][T13134] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 589.019279][T13134] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.173604][T13134] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 589.177870][T13134] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.370654][ T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 589.374097][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.381322][ T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 589.384573][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.391756][ T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 589.395114][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.404057][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 589.408552][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.327894][ T6662] net_ratelimit: 13 callbacks suppressed [ 590.327907][ T6662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.011512][ T8034] Bluetooth: hci0: command 0x1407 tx timeout [ 591.014317][ T845] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 591.017099][ T845] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 591.439207][ T6084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.695538][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.550772][ T6084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.320147][ T8034] Bluetooth: hci3: command 0x0c1a tx timeout [ 593.323045][ T845] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 593.325306][ T845] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 593.662698][ T6662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.237228][ T6084] usb 6-1: USB disconnect, device number 32 [ 594.773239][ T6084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.944180][ T6996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.884915][ T845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.312060][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.998438][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 596.998456][ T40] audit: type=1400 audit(1586.683:66434): avc: denied { egress } for pid=12 comm="kworker/u32:0" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 597.011162][ T6084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.011581][ T40] audit: type=1400 audit(1586.683:66435): avc: denied { sendto } for pid=12 comm="kworker/u32:0" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 598.107719][ T6084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog